JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.10.94

159.203.10.94 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 19%: ?

19%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.10.94

Whois 159.203.10.94

IP Abuse Reports for 159.203.10.94:

This IP address has been reported a total of 43 times from 27 distinct sources. 159.203.10.94 was first reported on April 12th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-12 04:35:51 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.10.94 (CA/Canada/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.10.94 (CA/Canada/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 MPL	2026-05-04 04:38:40 (1 month ago)	tcp/8888	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-03 22:04:56 (1 month ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 8882 GET / User-Agent: Mozilla/5.0 (X11; Linux x8 ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 8882 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8882 [2] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇺🇸 RAP	2026-05-03 21:58:16 (1 month ago)	2026-05-03 21:58:16 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇺🇸 MPL	2026-05-03 09:21:58 (1 month ago)	tcp/8880	Port Scan
🇩🇪 Admins@FBN	2026-05-03 09:01:33 (1 month ago)	FW-PortScan: Traffic Blocked srcport=61002 dstport=22	Port Scan Hacking SSH
🇺🇸 MPL	2026-04-15 04:40:37 (1 month ago)	tcp/8082	Port Scan
🇺🇸 MPL	2026-04-15 04:40:37 (1 month ago)	tcp/8082 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-04-15 04:09:10 (1 month ago)	Blocked by UFW (TCP on 8090) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8090) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 159.203.10.94) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-04-11 01:46:55 (2 months ago)	Blocked by UFW (TCP on 8082) Source port: 61007 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8082) Source port: 61007 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 159.203.10.94) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 masterguru	2026-04-11 01:43:15 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.10.94 (CA/Canada/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.10.94 (CA/Canada/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇫🇮 iamxorum	2026-04-11 01:33:46 (2 months ago)	2026-04-11T01:33:42.486883+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-04-11T01:33:42.486883+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=159.203.10.94 DST=46.62.222.43 LEN=44 TOS=0x08 PREC=0x00 TTL=236 ID=49251 PROTO=TCP SPT=61010 DPT=8080 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 sefinek.net	2026-04-06 01:28:46 (2 months ago)	Blocked by UFW on PL02 [5552/tcp] \| SPT: 61009 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on PL02 [5552/tcp] \| SPT: 61009 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-04-03 02:13:11 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/159.203.10.94 2026- ... show more ThreatBook Intelligence: vpn_proxy,Spam more details on https://threatbook.io/ip/159.203.10.94 2026-04-02 21:47:01 /wp1/wp-includes/wlwmanifest.xml 2026-04-02 21:47:00 /2019/wp-includes/wlwmanifest.xml 2026-04-02 21:47:00 /news/wp-includes/wlwmanifest.xml 2026-04-02 21:47:02 /media/wp-includes/wlwmanifest.xml 2026-04-02 21:46:57 / 2026-04-02 21:46:59 /web/wp-includes/wlwmanifest.xml 2026-04-02 21:46:57 /wp-includes/wlwmanifest.xml 2026-04-02 21:46:58 / 2026-04-02 21:46:59 /website/wp-includes/wlwmanifest.xml show less	Web App Attack
🇦🇹 neo72	2026-04-02 19:03:54 (2 months ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 192.109.200.220

🇺🇸 35.185.33.69

🇺🇸 207.90.244.17

🇮🇩 180.178.94.217

🇨🇳 122.51.203.101

🇮🇩 114.10.47.235

🇳🇱 91.92.40.4

🇬🇧 77.68.9.24

🇺🇸 52.146.92.163

🇳🇱 45.148.10.183

🇨🇱 34.176.22.139

🇪🇪 31.59.160.12

🇬🇧 217.146.80.103

🇭🇰 199.45.155.69

🇨🇳 112.66.14.55

🇩🇪 46.101.158.101

🇬🇧 217.146.80.99

🇳🇬 197.211.59.228

🇩🇪 169.150.201.134

🇺🇸 159.65.169.123