JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.159.96.62

94.159.96.62 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 81%: ?

81%

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215730
Hostname(s)	cli.h2.nexus
Domain Name	h2.nexus
Country	🇩🇪 Germany
City	Kelsterbach, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.159.96.62

Whois 94.159.96.62

IP Abuse Reports for 94.159.96.62:

This IP address has been reported a total of 64 times from 42 distinct sources. 94.159.96.62 was first reported on December 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-21 17:21:24 (1 day ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇯🇵 demonsword	2026-06-20 11:13:15 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: captcha.dstatbot.win:443:443 show less	Open Proxy Port Scan
🇩🇪 cloudmax	2026-06-20 08:44:17 (3 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇮 sonot	2026-06-20 08:33:43 (3 days ago)	Blocked by UFW on mail [5909/tcp] \| SPT: 44331 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [5909/tcp] \| SPT: 44331 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 sonot	2026-06-19 09:38:52 (4 days ago)	Blocked by UFW on mail [5910/tcp] \| SPT: 41660 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [5910/tcp] \| SPT: 41660 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-06-19 09:37:36 (4 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=94.159.96.62; proto=TCP; source_port=41660; target_port=5902; flags=SYN show less	Port Scan
🇩🇪 EinfxchFinn	2026-06-19 09:35:13 (4 days ago)	Unauthorized connection attempt to port 5901 from 94.159.96.62	Port Scan
🇩🇪 cloudmax	2026-06-18 12:59:36 (4 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇺🇸 MPL	2026-06-17 12:28:19 (5 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇩🇪 london2038.com	2026-06-17 12:24:05 (5 days ago)	Malformed or malicious web request 94.159.96.62 - - [17/Jun/2026:14:24:01 +0200] "xel.selfrep;rm+-rf ... show more Malformed or malicious web request 94.159.96.62 - - [17/Jun/2026:14:24:01 +0200] "xel.selfrep;rm+-rf+Yboats.arm7%3b%23&remoteSubmit=Save" 400 157 "-" "-" show less	Hacking Web App Attack
🇳🇴 jad-abuse	2026-06-16 17:08:23 (6 days ago)	ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: cgi_probe. O ... show more ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: cgi_probe. Observed by 1 sensor(s); 1 hits. show less	Hacking Web App Attack
🇩🇪 london2038.com	2026-06-16 16:58:50 (6 days ago)	Malformed or malicious web request 94.159.96.62 - - [16/Jun/2026:18:58:47 +0200] "xel.selfrep;rm+-rf ... show more Malformed or malicious web request 94.159.96.62 - - [16/Jun/2026:18:58:47 +0200] "xel.selfrep;rm+-rf+Yboats.arm7%3b%23&remoteSubmit=Save" 400 157 "-" "-" show less	Hacking Web App Attack
🇱🇹 NotACaptcha	2026-06-16 16:53:46 (6 days ago)	webserver:80 [16/Jun/2026] "xel.selfrep;rm+-rf+Yboats.arm7%3b%23&remoteSubmit=Save" 400 392 webserv ... show more webserver:80 [16/Jun/2026] "xel.selfrep;rm+-rf+Yboats.arm7%3b%23&remoteSubmit=Save" 400 392 webserver:80 [16/Jun/2026] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 403 400 "-" "r00ts3c-owned-you" show less	Hacking Web App Attack
Anonymous	2026-06-12 20:26:09 (1 week ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇭 Elysium Security	2026-06-11 16:56:03 (1 week ago)	Mass port scanning on a whole network	Port Scan

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.188.89.41

🇻🇳 171.244.39.95

🇭🇰 168.76.131.178

🇪🇬 154.177.10.239

🇳🇱 91.92.40.6

🇮🇹 72.146.1.254

🇺🇸 64.62.156.81

🇳🇿 45.133.7.143

🇧🇷 43.164.195.160

🇫🇷 2001:41d0:33a:a00::40b

🇰🇷 116.123.150.231

🇮🇳 103.112.224.81

🇧🇩 36.255.82.234

🇺🇸 24.119.52.56

🇯🇵 8.216.16.169

🇺🇸 2620:18c:0:192::e0:180

🇪🇬 193.227.49.19

🇨🇴 190.5.200.98

🇻🇳 123.25.121.13

🇻🇳 116.99.171.38