159.203.85.226

Classification: Malicious

159.203.85.226 is a malicious IP address in Clifton, US. 93 sightings from 5 threat sources (Malicious Host, HTTP Spammer), last seen 2026-11-01.

Current activity

  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2026-10-26 16:15:19 2026-11-01 16:14:01 malicious-activity reconnaissance
Suspicious Host AbuseIPDB 2024-11-25 01:57:03 2026-05-04 08:42:38 anomalous-activity
Malicious Host CIArmy 2026-04-26 15:09:09 2026-04-26 15:09:09 attacker malicious-activity
HTTP Spammer StopForumSpam.com 2017-10-15 19:06:31 2025-03-05 03:03:02 attacker malicious-activity
Malicious Host AbuseIPDB 2024-11-25 20:54:42 2025-01-22 23:01:08 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2024-11-25 09:10:19 2025-01-10 11:47:33 attacker malicious-activity
HTTP Attacker Blocklist.de 2024-11-25 08:25:34 2025-01-10 10:57:33 attacker malicious-activity
HTTP bot Blocklist.de 2024-12-04 09:48:16 2024-12-25 09:56:12 attacker malicious-activity

Tags

bot abuse apache ddos rfi attacker login bruteforce joomla wordpress spam

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
arin
AS date
2015-08-10 00:00:00
AS CIDR
159.203.80.0/20
CIDR
159.203.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Ave of the Americas 10th Floor
City
Clifton
State
NJ
Postal code
07015
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2017-10-15 19:06:31
Last updated
2026-11-06 16:45:49

Malicious IPs in the same CIDR

159.203.92.3 159.203.87.3 159.203.84.188 159.203.85.226 159.203.84.92 159.203.84.88 159.203.89.51 159.203.93.112 159.203.83.195 159.203.90.218 159.203.90.35 159.203.84.166 159.203.94.191 159.203.91.226 159.203.89.57