159.203.0.128
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇨🇦 Canada
- City
- Toronto, Ontario
No reports in the last 60 days
159.203.0.128 has been reported 49 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
49 from
32 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-06-20 17:30, Last: 2026-06-27 18:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
5 incidents: malicious activity. First: 2026-05-30 14:30, Last: 2026-06-27 18:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
8 incidents: malicious activity. First: 2026-05-23 13:30, Last: 2026-06-13 16:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
5 incidents: malicious activity. First: 2026-04-25 09:30, Last: 2026-05-23 13:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-05-09 11:30, Last: 2026-05-16 12:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇺🇸 micropedro |
6 incidents: malicious activity. First: 2026-04-11 08:03, Last: 2026-05-02 10:30 UTC. Triggers: ufw-repeater.
|
Port Scan | |
| 🇧🇷 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-03-04 23:54, Last: 2026-04-04 08:02 UTC. Triggers: firewall-tcp,ufw-repeater,ufw-repeater.
|
Port Scan | |
| 🇧🇷 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 159.203.0.128
2026-03-17T10:36:32+01:00 Connection closed by authenticating user root 159.203.0.128 port 40754 [preauth]
|
Brute-Force SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.0.128 (CA/Canada/-): 1 in the last 3600 secs (0-195)
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8081)
Source port: 61006
TTL: 244
Packet length: 44
TOS: 0x08
This report (for 159.203.0.128) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 SOC Blue Team |
IPs get by Hunting on SIEM
|
Phishing Web Spam Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown