AS48721 Flyservers S.A.

Abuse reported against IP addresses announced by autonomous system 48721. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 28 IP addresses in AS48721 Flyservers S.A. were reported for abuse, in 138 reports altogether. 1 of them (3%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were SSH, Malware Distribution and Brute-Force. Most of them are in Lithuania.

28addresses reported, 30 days

1on the default blocklist (75+)

138reports against them

5 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇱🇹194.165.16.167	79	13	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.161	71	12	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.166	69	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.122	66	11	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.163	63	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.123	62	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.139	58	9	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.165	56	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.164	56	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.121	56	7	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.48	55	8	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.162	50	7	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.151	43	5	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	5 h
🇱🇹194.165.16.19	39	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	19 h
🇱🇹194.165.16.26	37	2	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	5 h
🇱🇹194.165.16.21	29	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	19 h
🇱🇹194.165.17.21	17	1	Brute-Force SSH Malware Distribution	19 h
🇱🇹194.165.16.78	17	1	Brute-Force SSH Malware Distribution	19 h
🇱🇹194.165.16.76	17	1	Brute-Force SSH Malware Distribution	19 h
🇱🇹194.165.16.73	17	1	Brute-Force SSH Malware Distribution	19 h

What they were reported for

Where they are

🇱🇹 Lithuania28

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 49 minutes ago.