JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.203.120.146

Neutral Activity

Abuse confidence score ?

0% Low Risk

50 reports

39 reporters · latest 10 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	geointga.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.203.120.146 has been reported 50 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.203.120.146

This IP address has been reported a total of 50 times from 39 distinct sources. 159.203.120.146 was first reported on October 28th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇪 Oste	2025-11-10 00:00:08 (10 months ago)	Unauthorized activity detected from reported IP, including scanning and intrusion attempts.	Hacking SQL Injection Bad Web Bot Web App Attack
🇧🇷 Sipo Chutão	2025-11-09 03:00:01 (10 months ago)	/.git/config	Hacking
🇩🇪 MarkGGN	2025-11-08 01:44:51 (10 months ago)	Webexploits. 159.203.120.146 - - [08/Nov/2025:02:41:12 +0100] "GET /.git/config HTTP/1.1" 401 0 "-" ... show more Webexploits. 159.203.120.146 - - [08/Nov/2025:02:41:12 +0100] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [08/Nov/2025:02:44:50 +0100] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 uhlhosting	2025-11-07 12:38:18 (10 months ago)	137.74.247.204 159.203.120.146 - - [07/Nov/2025:12:24:35.449584 +0100] "GET /.git/config HTTP/1.1" 4 ... show more 137.74.247.204 159.203.120.146 - - [07/Nov/2025:12:24:35.449584 +0100] "GET /.git/config HTTP/1.1" 403 199 "-" "-" aQ3W85BCKLHknuodXMB4BwAAAA0 "-" /apache/20251107/20251107-1224/20251107-122435-aQ3W85BCKLHknuodXMB4BwAAAA0 0 1124 md5:d639539c0c632fbd14d46b8666d782e3 137.74.247.204 159.203.120.146 - - [07/Nov/2025:12:55:19.010788 +0100] "GET /.git/config HTTP/1.1" 403 199 "-" "-" aQ3eJ5QFQxZ-uCYo2OfORgAAARI "-" /apache/20251107/20251107-1255/20251107-125519-aQ3eJ5QFQxZ-uCYo2OfORgAAARI 0 1123 md5:2ef1c2760ccd64deaa71116c9985fe91 137.74.247.204 159.203.120.146 - - [07/Nov/2025:12:55:22.244621 +0100] "GET /.git/config HTTP/1.1" 403 199 "-" "-" aQ3eKpQFQxZ-uCYo2OfORwAAARA "-" /apache/20251107/20251107-1255/20251107-125522-aQ3eKpQFQxZ-uCYo2OfORwAAARA 0 1124 md5:150f778ac10a5477c26846f984e4eaf5 137.74.247.204 159.203.120.146 - - [07/Nov/2025:13:38:14.825319 +0100] "GET /.git/config HTTP/1.1" 403 199 "-" "-" aQ3oNj-GEuCLKnLItfWFaAAAAEY "-" /apache/20251107/20251107-1338/20251107-133814-aQ3oN ... show less	DDoS Attack Brute-Force
🇦🇹 Pingger Shikkoken	2025-11-07 04:19:44 (10 months ago)	2025-11-07T04:19:44+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-11-07T04:19:44+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=159.203.120.146 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=44406 DF PROTO=TCP SPT=42744 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-11-07T04:19:45+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=159.203.120.146 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=44407 DF PROTO=TCP SPT=42744 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-11-07T04:19:47+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=159.203.120.146 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=44408 DF PROTO=TCP SPT=42744 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇳🇱 Jordy	2025-11-07 02:30:48 (10 months ago)	07/Nov/2025:03:30:48.054706 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 07/Nov/2025:03:30:48.054706 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "aQ1Z2M8zBgxlXNTmvZjXwwAAAAA"] 07/Nov/2025:03:30:48.054706 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restri ... show less	Web App Attack
🇦🇹 Pingger Shikkoken	2025-11-07 01:50:31 (10 months ago)	159.203.120.146 - - [07/Nov/2025:00:11:46 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5. ... show more 159.203.120.146 - - [07/Nov/2025:00:11:46 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [07/Nov/2025:00:11:49 +0000] "GET /.git/config HTTP/1.1" 404 4106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [07/Nov/2025:01:50:26 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [07/Nov/2025:01:50:31 +0000] "GET /.git/config HTTP/1.1" 404 4106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇬🇧 [email protected]	2025-11-07 00:43:20 (10 months ago)	...	Brute-Force SSH
🇳🇱 Jordy	2025-11-07 00:23:04 (10 months ago)	07/Nov/2025:01:23:03.912654 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 07/Nov/2025:01:23:03.912654 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "aQ075xirfGTiKKo38uvwcgAAAAM"] 07/Nov/2025:01:23:03.912654 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restri ... show less	Web App Attack
🇩🇪 leryon	2025-11-07 00:20:18 (10 months ago)	IP: 159.203.120.146 sends in the last 24 hours 6 invalid requests over 80	Web Spam Hacking
🇦🇹 Pingger Shikkoken	2025-11-06 23:55:10 (10 months ago)	159.203.120.146 - - [06/Nov/2025:20:18:20 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5. ... show more 159.203.120.146 - - [06/Nov/2025:20:18:20 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [06/Nov/2025:20:18:21 +0000] "GET /.git/config HTTP/1.1" 404 4106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [06/Nov/2025:23:55:05 +0000] "GET /.git/config HTTP/1.1" 302 522 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [06/Nov/2025:23:55:10 +0000] "GET /.git/config HTTP/1.1" 404 4106 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇳🇱 Jordy	2025-11-06 23:04:15 (10 months ago)	07/Nov/2025:00:04:14.723431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 07/Nov/2025:00:04:14.723431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "aQ0pbhAVG6HFM1HNqXk5ZwAAAA8"] 07/Nov/2025:00:04:14.723431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restri ... show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-06 22:42:42 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/159.203.120.146 2025-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/159.203.120.146 2025-11-06 11:47:24 /.git/config show less	Web App Attack
🇳🇱 Jordy	2025-11-06 21:30:06 (10 months ago)	06/Nov/2025:22:30:04.482356 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 06/Nov/2025:22:30:04.482356 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "aQ0TXBVjeoYuSXB7nDkUwgAAAAI"] 06/Nov/2025:22:30:04.482356 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.203.120.146] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restri ... show less	Web App Attack
Anonymous	2025-11-06 20:30:13 (10 months ago)	159.203.120.146 - - [07/Nov/2025:04:21:34 +0900] "GET /.git/config HTTP/1.1" 403 496 "-" "Mozilla/5. ... show more 159.203.120.146 - - [07/Nov/2025:04:21:34 +0900] "GET /.git/config HTTP/1.1" 403 496 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [07/Nov/2025:04:58:35 +0900] "GET /.git/config HTTP/1.1" 403 496 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 159.203.120.146 - - [07/Nov/2025:05:30:12 +0900] "GET /.git/config HTTP/1.1" 403 496 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.145

🇭🇰 49.131.62.182

🇨🇦 45.198.224.34

🇷🇴 2.57.121.112

🇳🇱 195.178.110.227

🇬🇧 195.96.139.172

🇨🇭 185.231.32.233

🇨🇴 177.93.59.92

🇺🇸 156.232.10.218

🇻🇳 103.241.43.193

🇮🇩 103.168.135.187

🇺🇸 64.62.197.195

🇭🇰 49.131.227.199

🇺🇸 47.251.171.144

🇨🇳 47.95.192.52

🇧🇷 45.169.200.254

🇮🇸 45.133.193.83

🇳🇱 195.178.110.50

🇦🇷 181.20.2.18

🇨🇳 115.212.233.118