85.203.44.237

Classification: Malicious

85.203.44.237 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-05. Network: AS42708 EXPRES-85-203-44-0.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-07-04 16:16:36 2026-09-05 16:30:58 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:33:12 2026-09-04 16:33:12 attacker malicious-activity
VPN IPWhois.io 2025-06-11 08:36:19 2026-07-08 19:11:47 anonymization vpn
Suspicious Host AbuseIPDB 2024-08-04 21:11:12 2026-06-04 00:20:41 anomalous-activity
HTTP bot Blocklist.de 2026-01-14 10:12:03 2026-01-15 05:20:06 malicious-activity
HTTP Spammer StopForumSpam.com 2020-03-31 02:59:25 2025-10-21 14:21:28 malicious-activity
HTTP Spammer Sblam 2024-04-29 13:31:50 2025-07-27 22:34:50 malicious-activity
Proxy IPWhois.io 2025-02-08 22:45:59 2025-03-01 08:54:27 anonymization
Malicious Host HoneyDB 2020-04-08 00:00:00 2020-04-09 00:00:00

Tags

bot abuse attacker spam bruteforce

Whois information

AS name
AS42708 EXPRES-85-203-44-0
AS registry
ripencc
AS date
2005-01-12 00:00:00
AS CIDR
85.203.44.0/24
CIDR
85.203.44.0/24
Registrant
EXPRES-85-203-44-0
Address
Kuiperbergweg 13, 1101 AE Amsterdam, The Netherlands
City
Stockholm
Postal code
111 29
Country
SE — Sweden 🇸🇪
First indexed
2020-03-31 02:59:25
Last updated
2026-09-05 16:30:58

Malicious IPs in the same CIDR

85.203.44.151 85.203.44.238 85.203.44.242 85.203.44.207 85.203.44.7 85.203.44.56 85.203.44.254 85.203.44.14 85.203.44.26 85.203.44.90 85.203.44.109 85.203.44.153 85.203.44.156 85.203.44.178 85.203.44.228 85.203.44.31 85.203.44.62 85.203.44.106 85.203.44.130 85.203.44.229 85.203.44.232 85.203.44.237 85.203.44.244 85.203.44.144 85.203.44.139