116.203.185.64

Classification: Malicious

116.203.185.64 is a malicious IP address in Nuremberg, DE. 94 sightings from 5 threat sources (Proxy, Mail Spammer), last seen 2026-10-17.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2025-02-26 21:53:04 2026-10-17 19:59:03 anonymization proxy
Mail Spammer Barracuda 2022-12-22 02:04:04 2026-10-17 19:59:03 attacker malicious-activity
Proxy FireHOL 2023-10-06 03:47:14 2025-10-07 04:59:32 anonymization
SSH Attacker Blocklist.de 2022-12-22 02:04:02 2023-03-10 06:02:56 malicious-activity
SSH Attacker Maltiverse 2022-12-21 21:36:25 2022-12-22 01:34:22 malicious-activity
Bruteforce Maltiverse 2022-12-21 20:35:26 2022-12-22 01:34:22 malicious-activity
Port Scanner Maltiverse 2022-12-21 21:54:34 2022-12-22 01:10:13 anomalous-activity
Hacking Maltiverse 2022-12-21 21:40:40 2022-12-22 01:10:13 malicious-activity
FTP Attacker Maltiverse 2022-12-21 21:40:40 2022-12-21 21:40:40 malicious-activity

Tags

ssh bruteforce bot anonymization

Whois information

AS name
AS24940 Hetzner Online GmbH
AS registry
ripencc
AS date
2011-01-17 00:00:00
AS CIDR
116.203.0.0/16
CIDR
116.202.0.0/15
Registrant
Hetzner Online GmbH
Address
Industriestrasse 25 D-91710 Gunzenhausen GERMANY
City
Nuremberg
Postal code
90331
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected]
First indexed
2022-12-22 02:04:02
Last updated
2026-10-17 19:59:05

Malicious IPs in the same CIDR

116.203.207.52 116.203.189.71 116.203.146.88 116.203.196.70 116.203.189.79 116.203.211.25 116.203.195.42 116.203.225.14 116.203.197.87 116.203.101.83 116.203.131.37 116.203.227.79 116.203.218.88 116.203.127.64 116.203.108.73 116.203.100.29 116.203.222.46 116.203.205.97 116.203.106.94 116.203.156.12 116.203.145.81 116.203.119.11 116.203.199.47 116.203.254.38 116.203.117.22