194.165.16.6

Classification: Suspicious

194.165.16.6 is a suspicious IP address. Reported by 6 threat sources, last seen 2025-09-12. Network: AS48721 Flyservers S.A..

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Suspicious Host AbuseIPDB 2025-09-11 09:16:58 2025-09-12 07:35:15 anomalous-activity
Gen:Variant.Midie Hybrid-Analysis 2021-07-07 14:30:34 2021-07-07 14:30:34
Trojan.Ransom.Cerber Hybrid-Analysis 2021-02-08 04:30:12 2021-02-08 04:30:12
Malicious Host Alienvault Ip Reputation Database 2020-11-13 06:54:34 2020-12-03 06:56:50 malicious-activity
Malicious Host CIArmy 2020-11-12 08:45:24 2020-11-13 08:50:41
Malicious Host HoneyDB 2020-11-13 00:00:00 2020-11-13 00:00:00
Trojan.Generic Hybrid-Analysis 2018-09-09 14:15:57 2018-09-09 14:16:00
Ransom.XW Hybrid-Analysis 2018-09-09 14:15:47 2018-09-09 14:15:47
cerber,ransomware Maltiverse 2017-10-17 06:34:47 2017-10-17 06:34:47

Tags

cerber ransomware

Whois information

AS name
AS48721 Flyservers S.A.
AS registry
ripencc
AS date
2009-01-16 00:00:00
AS CIDR
194.165.16.0/23
Registrant
Flyservers S.A.
City
Kaunas
Postal code
44252
Country
LT — Lithuania 🇱🇹
First indexed
2017-10-17 06:34:47
Last updated
2025-11-11 21:38:57

Malicious IPs in the same CIDR

194.165.16.123 194.165.16.21 194.165.16.122 194.165.16.121 194.165.17.13