94.198.96.165

Classification: Malicious

94.198.96.165 is a malicious IP address. Reported by 5 threat sources, last seen 2026-08-11. Network: AS49367 Portable IP wf2.

Current activity

  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unknown RAT ThreatFox Abuse.ch 2026-07-21 07:10:00 2026-08-11 10:25:05 malicious-activity
Proxy IPWhois.io 2026-07-21 11:31:01 2026-07-21 11:31:01 anonymization proxy
Proxy FireHOL 2024-05-06 06:00:11 2025-10-06 17:54:28 anonymization
HTTP Spammer StopForumSpam.com 2024-07-23 09:03:31 2024-09-04 02:49:49 malicious-activity
Webmail - generic or unknown phishing Maltiverse 2018-07-07 07:44:02 2018-07-07 07:44:02

Tags

phishing anonymization bot abuse rat lxbaserat port:63921 port:62769

Whois information

AS name
AS49367 Portable IP wf2
AS registry
ripencc
AS date
2008-10-24 00:00:00
AS CIDR
94.198.96.0/21
Registrant
Portable IP wf2
City
Milan
Postal code
20122
Country
IT — Italy 🇮🇹
First indexed
2018-07-07 07:44:02
Last updated
2026-08-11 10:25:05

Malicious IPs in the same CIDR

94.198.98.20 94.198.96.165