JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.166.155

159.203.166.155 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.166.155

Whois 159.203.166.155

IP Abuse Reports for 159.203.166.155:

This IP address has been reported a total of 88 times from 68 distinct sources. 159.203.166.155 was first reported on October 27th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 RoboSOC	2026-07-07 21:37:02 (1 hour ago)	Port 22 Scan, PTR: None	Port Scan
🇩🇪 Bigbear3	2026-07-07 17:10:51 (5 hours ago)	Report-by-bigbear3	Brute-Force SSH
🇫🇷 [email protected]	2026-07-07 16:30:46 (6 hours ago)	Jul 7 18:30:45 mail6 sshd-session[3980170]: User root from 159.203.166.155 not allowed because not ... show more Jul 7 18:30:45 mail6 sshd-session[3980170]: User root from 159.203.166.155 not allowed because not listed in AllowUsers Jul 7 18:30:46 mail6 sshd-session[3980172]: User root from 159.203.166.155 not allowed because not listed in AllowUsers Jul 7 18:30:46 mail6 sshd-session[3980173]: User root from 159.203.166.155 not allowed because not listed in AllowUsers Jul 7 18:30:46 mail6 sshd-session[3980174]: User root from 159.203.166.155 not allowed because not listed in AllowUsers Jul 7 18:30:46 mail6 sshd-session[3980177]: User root from 159.203.166.155 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-07-07 15:11:12 (7 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 antlac1	2026-07-07 12:14:57 (10 hours ago)	crowdsecurity/ssh-bf	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 08:23:03 (14 hours ago)	Jul 7 10:23:02 pegasus sshd[2462100]: Failed password for root from 159.203.166.155 port 60188 ssh2 ... show more Jul 7 10:23:02 pegasus sshd[2462100]: Failed password for root from 159.203.166.155 port 60188 ssh2 Jul 7 10:23:00 pegasus sshd[2462099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 7 10:23:02 pegasus sshd[2462099]: Failed password for root from 159.203.166.155 port 60182 ssh2 Jul 7 10:23:00 pegasus sshd[2462101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 7 10:23:02 pegasus sshd[2462101]: Failed password for root from 159.203.166.155 port 60180 ssh2 show less	Brute-Force SSH
🇩🇪 marten_o	2026-07-07 04:45:16 (18 hours ago)	2026-07-07T06:45:15.221379+02:00 serv1.blumental-server.de sshd-session[13351]: Failed password for ... show more 2026-07-07T06:45:15.221379+02:00 serv1.blumental-server.de sshd-session[13351]: Failed password for root from 159.203.166.155 port 42692 ssh2 2026-07-07T06:45:13.541861+02:00 serv1.blumental-server.de sshd-session[13349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root 2026-07-07T06:45:15.387446+02:00 serv1.blumental-server.de sshd-session[13349]: Failed password for root from 159.203.166.155 port 42688 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-07 04:16:55 (18 hours ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 vcis.de	2026-07-07 03:36:02 (19 hours ago)	SSH brute force attack detected from [159.203.166.155]	SSH Brute-Force
🇫🇷 LRob	2026-07-07 02:20:05 (20 hours ago)	CrowdSec: crowdsecurity/ssh-bf	Brute-Force SSH
🇺🇸 rsa	2026-07-06 20:07:00 (1 day ago)	ssh	Brute-Force SSH
Anonymous	2026-07-06 12:23:54 (1 day ago)	(sshd) Failed SSH login from 159.203.166.155 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 159.203.166.155 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 6 08:23:49 server5 sshd[20527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 6 08:23:49 server5 sshd[20522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 6 08:23:49 server5 sshd[20531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 6 08:23:49 server5 sshd[20547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root Jul 6 08:23:49 server5 sshd[20542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root show less	Brute-Force
🇳🇱 Alboweb B.V.	2026-07-06 10:14:36 (1 day ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇨🇦 KIsmay	2026-07-06 05:03:35 (1 day ago)	2026-07-06T01:03:34.112093-04:00 www3 sshd[384265]: Failed password for root from 159.203.166.155 po ... show more 2026-07-06T01:03:34.112093-04:00 www3 sshd[384265]: Failed password for root from 159.203.166.155 port 35634 ssh2 2026-07-06T01:03:31.696141-04:00 www3 sshd[384268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root 2026-07-06T01:03:34.132115-04:00 www3 sshd[384268]: Failed password for root from 159.203.166.155 port 35660 ssh2 2026-07-06T01:03:31.718978-04:00 www3 sshd[384271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.166.155 user=root 2026-07-06T01:03:34.156020-04:00 www3 sshd[384271]: Failed password for root from 159.203.166.155 port 35672 ssh2 ... show less	Brute-Force SSH
🇮🇹 mediarama.com	2026-07-06 04:58:15 (1 day ago)	Banned by Fail2Ban	Brute-Force SSH

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 134.33.4.17

🇪🇸 81.43.179.194

🇺🇸 81.30.98.181

🇨🇴 45.238.182.66

🇵🇰 203.175.74.145

🇷🇴 193.32.162.71

🇵🇱 176.53.159.197

🇮🇹 151.59.114.51

🇭🇰 101.32.1.25

🇺🇸 66.132.186.242

🇳🇱 45.148.10.157

🇺🇸 40.83.182.122

🇧🇷 201.131.153.57

🇺🇸 147.185.132.180

🇳🇱 91.92.42.80

🇳🇱 91.92.40.45

🇱🇹 45.227.254.170

🇰🇪 41.89.96.242

🇺🇸 20.65.194.119

🇲🇽 187.174.238.116