JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.165.16.47

194.165.16.47 was found in our database!

This IP was reported 292 times. Confidence of Abuse is 100%: ?

100%

ISP	Flyservers S.A.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48721
Domain Name	flyservers.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.165.16.47

Whois 194.165.16.47

IP Abuse Reports for 194.165.16.47:

This IP address has been reported a total of 292 times from 142 distinct sources. 194.165.16.47 was first reported on January 17th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-06-29 00:40:15 (2 days ago)	Rule : RDP Rule: RDP Event: RDP S-1-0-0 - - 0x0 S-1-0-0 adam - 0xc000006d %#13 0xc0000064 3 NtLmSs ... show more Rule : RDP Rule: RDP Event: RDP S-1-0-0 - - 0x0 S-1-0-0 adam - 0xc000006d %#13 0xc0000064 3 NtLmSsp NTLM HOSTNAME - - 0 0x0 - 194.165.16.47 0 show less	SSH Brute-Force
🇦🇹 CTK	2026-06-29 00:24:41 (2 days ago)	RDP Brute-Force (Grieskirchen RZ1)	Brute-Force
🇫🇷 dwmp	2026-06-26 12:08:54 (5 days ago)	Jun 26 14:08:53 plesk postfix/smtpd[2186316]: lost connection after CONNECT from unknown[194.165.16. ... show more Jun 26 14:08:53 plesk postfix/smtpd[2186316]: lost connection after CONNECT from unknown[194.165.16.47] Jun 26 14:08:53 plesk postfix/smtpd[2186316]: lost connection after CONNECT from unknown[194.165.16.47] Jun 26 14:08:53 plesk postfix/smtpd[2186316]: lost connection after CONNECT from unknown[194.165.16.47] ... show less	Brute-Force SSH
🇧🇪 sauron-le-noir	2026-06-26 11:12:42 (5 days ago)	scan port : 23 from Monaco at Fri Jun 26 13:16:50 2026	Port Scan
🇫🇷 CYBER-SECURITY-MM	2026-06-26 05:01:44 (5 days ago)	Bloqueada por Fail2Ban jail postscreen por intento de spam SMTP	Web App Attack
🇪🇸 DXC-0	2026-06-26 03:00:44 (5 days ago)	Multiple attacks on Honeypot servers	Web Spam Brute-Force Web App Attack Hacking
🇪🇸 librebit	2026-06-26 02:27:06 (5 days ago)	Brute force	Brute-Force
🇩🇪 hbrks	2026-06-26 01:47:49 (5 days ago)	9 attack(s) detected, such as these: {"event":"web_block","ip":"194.165.16.47","host":"_","request": ... show more 9 attack(s) detected, such as these: {"event":"web_block","ip":"194.165.16.47","host":"_","request":"","user_agent":"","reason":"Status-400","timestamp":"2026-06-26T01:47:49 00:00","logentry":"_ 194.165.16.47 - - [26/Jun/2026:01:47:49 0000] \"\\x03\\x00\\x00,'\\xE0\\x00\\x00\\x00\\x00\\x00Cookie: mstshash=Domain\" 400 150 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/G22PDXIJYX1/1 IP Details *: https://p4u.xyz/G22PDXIJYX1/2 show less	Web Spam Hacking Bad Web Bot
🇳🇴 Abuse Buster	2026-06-26 01:46:03 (5 days ago)	194.165.16.47 - - [26/Jun/2026:03:46:01 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstsha ... show more 194.165.16.47 - - [26/Jun/2026:03:46:01 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain" 400 150 "-" "-" 194.165.16.47 - - [26/Jun/2026:03:46:01 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain" 400 150 "-" "-" 194.165.16.47 - - [26/Jun/2026:03:46:01 +0200] "\x03\x00\x00,'\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Domain" 400 150 "-" "-" ... show less	Web App Attack
🇳🇱 ipoac.nl	2026-06-26 01:43:03 (5 days ago)	2026-06-26T03:43:02.048154+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT ... show more 2026-06-26T03:43:02.048154+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[194.165.16.47]:10322: 003000000,'340000000000000000Cookie: mstshash=Domainrn001000b000003000000000 2026-06-26T03:43:02.132338+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[194.165.16.47]:11422: 003000000,'340000000000000000Cookie: mstshash=Domainrn001000b000003000000000 2026-06-26T03:43:02.224252+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[194.165.16.47]:11602: 003000000,'340000000000000000Cookie: mstshash=Domainrn001000b000003000000000 show less	Brute-Force
🇺🇸 Carltonfsck	2026-06-26 01:41:32 (5 days ago)	Jun 26 01:41:30 ssh postfix/smtpd[81613]: improper command pipelining after CONNECT from unknown[194 ... show more Jun 26 01:41:30 ssh postfix/smtpd[81613]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 Jun 26 01:41:31 ssh postfix/smtpd[81613]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 Jun 26 01:41:31 ssh postfix/smtpd[81613]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 ... show less	Hacking Brute-Force
🇺🇸 FurrIX vIX	2026-06-26 01:38:11 (5 days ago)	[FurrIX NOC, Automated, PHY TWO]: Bonked into empty SSH door. Whatcha looking for in there, eh?!	Brute-Force SSH
🇺🇸 kosada.com	2026-06-26 01:37:55 (5 days ago)	SSH vulnerability probing: banner exchange: Connection from 194.165.16.47 port 40172: invalid format ... show more SSH vulnerability probing: banner exchange: Connection from 194.165.16.47 port 40172: invalid format [preauth] show less	Port Scan SSH
Anonymous	2026-06-26 01:31:45 (5 days ago)	2026-06-25T21:31:43.947409-04:00 mail postfix/smtpd[678046]: improper command pipelining after CONNE ... show more 2026-06-25T21:31:43.947409-04:00 mail postfix/smtpd[678046]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 2026-06-25T21:31:44.233818-04:00 mail postfix/smtpd[678046]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 2026-06-25T21:31:44.468693-04:00 mail postfix/smtpd[678046]: improper command pipelining after CONNECT from unknown[194.165.16.47]: \003\000\000,'\340\000\000\000\000\000Cookie: mstshash=Domain\r\n\001\000\b\000\003\000\000\000 ... show less	Email Spam Brute-Force
🇩🇪 lightaffaire	2026-06-26 01:21:50 (5 days ago)	Jun 26 03:21:41 prod1 postfix/submissions/smtpd[2552705]: NOQUEUE: lost connection after CONNECT fro ... show more Jun 26 03:21:41 prod1 postfix/submissions/smtpd[2552705]: NOQUEUE: lost connection after CONNECT from unknown[194.165.16.47] Jun 26 03:21:41 prod1 postfix/submissions/smtpd[2552705]: NOQUEUE: lost connection after CONNECT from unknown[194.165.16.47] Jun 26 03:21:41 prod1 postfix/submissions/smtpd[2552705]: NOQUEUE: lost connection after CONNECT from unknown[194.165.16.47] ... show less	Port Scan

Showing 1 to 15 of 292 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.253.211.23

🇺🇸 205.210.31.75

🇧🇷 177.92.46.39

🇲🇦 81.192.46.32

🇺🇸 23.92.17.246

🇰🇷 14.63.196.175

🇮🇪 2603:1062:0:316::12

🇮🇳 2404:6800:4000:1025::124

🇺🇸 162.216.150.231

🇲🇴 125.31.2.160

🇫🇷 51.159.104.219

🇨🇳 47.118.85.197

🇳🇱 45.148.10.151

🇱🇹 194.165.16.166

🇧🇷 191.234.169.57

🇺🇸 173.255.194.34

🇮🇩 163.7.0.179

🇺🇸 152.86.105.217

🇺🇸 69.73.187.130

🇭🇰 45.207.196.123