159.203.85.42

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
24 reports
14 reporters Β· latest 1 month ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Clifton, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡§πŸ‡· Brazil 12 πŸ‡¦πŸ‡Ί Australia 1 πŸ‡©πŸ‡ͺ Germany 1
Most common categories Web App Attack 11 Port Scan 6 Hacking 4 Bad Web Bot 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡§πŸ‡· Host One
T-Pot Honeypot alert: 12 malicious events (exploit_attempt, port_scan) detected.
Port Scan Hacking
πŸ‡«πŸ‡· EvoX
πŸ›‘οΈ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-Encoding: gzip; 8181 [1] TCP
Hacking Bad Web Bot
πŸ‡§πŸ‡· diego
[probe-168-134] 2026-10-06 21:41:20, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡΅πŸ‡± sefinek.net
Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-Encoding: gzip; 8181 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
πŸ‡§πŸ‡· diego
[arem1] 2026-10-06 21:23:48, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡§πŸ‡· diego
[probe-44-49] 2026-10-06 20:26:43, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡§πŸ‡· diego
[probe-44-49] 2026-10-06 20:07:31, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡§πŸ‡· diego
[probe-44-49] 2026-10-06 19:10:27, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡§πŸ‡· diego
[probe-68-69] 2026-10-06 18:45:23, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
πŸ‡¦πŸ‡Ί LiftUp Hosting
Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: */* Accept-Encoding: gzip; 8181 [1] TCP
Hacking Bad Web Bot
πŸ‡©πŸ‡ͺ _ArminS_
SP-Scan 46082:8181 detected 2026.10.06 19:38:56 blocked until 2026.11.25 11:41:43
Port Scan
πŸ‡¬πŸ‡§ essinghigh
IPS Detection: 159.203.85.42 -> DPT: 8181
Port Scan
πŸ‡§πŸ‡· diego
[rede-188] 2026-10-06 15:13:33, Client: 159.203.85.42, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
Anonymous
ZMap Security Scanner.
Port Scan
πŸ‡²πŸ‡³ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 8181 [1] TCP
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ΊπŸ‡Έ 195.184.76.134
πŸ‡¦πŸ‡· 181.230.150.217
πŸ‡«πŸ‡· 104.28.228.55
πŸ‡ΊπŸ‡Έ 71.208.141.242
πŸ‡ΊπŸ‡Έ 45.145.131.49
πŸ‡΅πŸ‡ͺ 38.226.159.94
πŸ‡ΊπŸ‡Έ 35.236.219.39
πŸ‡³πŸ‡± 204.76.203.212
πŸ‡§πŸ‡΄ 200.105.158.196
πŸ‡ΊπŸ‡Έ 193.202.8.170
πŸ‡΅πŸ‡¦ 190.140.113.139
πŸ‡§πŸ‡΄ 190.129.165.31
πŸ‡¦πŸ‡΄ 154.127.160.248
πŸ‡»πŸ‡ͺ 154.27.140.28
πŸ‡¨πŸ‡¦ 129.222.96.157
πŸ‡ΊπŸ‡Έ 128.242.13.40
πŸ‡ΊπŸ‡Έ 100.31.80.132
πŸ‡·πŸ‡΄ 92.118.39.77
πŸ‡«πŸ‡· 91.231.89.167
πŸ‡«πŸ‡· 91.196.152.40
feedback