85.203.15.197

Classification: Malicious

85.203.15.197 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-11. Network: AS62240 FRANKFURT-DE-85-203-15-0.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Empty reason Blocklist.net.ua 2026-09-04 16:33:02 2026-09-11 16:31:41 attacker malicious-activity
DDoS Attacker Blocklist.net.ua 2026-03-23 12:25:24 2026-09-05 16:30:49 attacker malicious-activity
VPN IPWhois.io 2025-03-10 10:02:59 2026-07-12 09:48:13 anonymization vpn
HTTP bot Blocklist.de 2026-06-22 08:01:17 2026-06-23 08:02:01 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-09-20 16:10:18 2026-06-04 09:15:02 anomalous-activity
Malicious Host AbuseIPDB 2026-03-19 16:19:55 2026-03-24 03:45:27 malicious-activity
Malicious Host HoneyDB 2026-03-18 00:00:00 2026-03-21 00:00:00 malicious-activity
HTTP Spammer StopForumSpam.com 2024-09-04 02:06:01 2025-11-27 22:09:56 malicious-activity
Proxy IPWhois.io 2025-02-14 07:51:06 2025-06-14 20:45:20 anonymization

Tags

bot abuse attacker spam bruteforce

Whois information

AS name
AS62240 FRANKFURT-DE-85-203-15-0
AS registry
ripencc
AS date
2005-01-12 00:00:00
AS CIDR
85.203.15.0/24
Registrant
FRANKFURT-DE-85-203-15-0
City
Eschborn
Postal code
65760
Country
DE — Germany 🇩🇪
First indexed
2024-09-04 02:06:01
Last updated
2026-09-11 16:31:41

Malicious IPs in the same CIDR

85.203.15.33 85.203.15.198 85.203.15.202 85.203.15.213 85.203.15.242 85.203.15.196 85.203.15.197 85.203.15.201 85.203.15.207 85.203.15.228 85.203.15.246 85.203.15.232 85.203.15.234 85.203.15.248 85.203.15.101 85.203.15.106 85.203.15.107 85.203.15.149 85.203.15.86 85.203.15.91 85.203.15.98 85.203.15.109 85.203.15.122 85.203.15.169 85.203.15.191