15.197.240.20

Classification: Whitelisted

15.197.240.20 is a whitelisted (trusted) IP address. Reported by 4 threat sources, last seen 2026-07-04. Network: AS16509 Amazon Technologies Inc..

Current activity

  • VPN node β€” Provides anonymization that can hide an attacker.
  • Hosting provider β€” Shared hosting infrastructure.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-04 09:19:52 2026-07-04 09:19:52 benign
VPN IPWhois.io 2026-07-04 09:19:51 2026-07-04 09:19:51 anonymization vpn
VPN PublicVpnConfigs Maltiverse Threat Observatory 2026-03-10 08:00:44 2026-03-16 08:02:26 country_code:ni industry:manufacturing
NetSupportManager RAT ThreatFox Abuse.ch 2024-12-11 14:18:10 2024-12-11 14:18:10 malicious-activity

Tags

ioc netsupport port:1194 port:51820 port:992 port:5555 port:500 port:4500 port:1701 port:1723

Whois information

AS name
AS16509 Amazon Technologies Inc.
AS registry
arin
AS date
2021-01-28 00:00:00
AS CIDR
15.197.240.0/20
CIDR
15.196.0.0/14, 15.200.0.0/16
Registrant
Amazon Technologies Inc.
Address
410 Terry Ave N.
City
Seattle
State
WA
Postal code
98104
Country
US β€” United States πŸ‡ΊπŸ‡Έ
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2024-12-11 14:18:10
Last updated
2026-07-04 09:19:52