Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 159.203.21.44
This IP address has been reported a total of
32
times from
28 distinct
sources.
159.203.21.44 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 5
reports;
Canada
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Port Scan
6
times;
Hacking
4
times;
Exploited Host
1
time;
Bad Web Bot
1
time;
Brute-Force
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 12000)
Source port: 61009
TTL: 243
Packet length: 44
TOS: 0x00
This report ( ...
show moreBlocked by UFW (TCP on 12000)
Source port: 61009
TTL: 243
Packet length: 44
TOS: 0x00
This report (for 159.203.21.44) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 53.
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown ...
show moreAug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connection after CONNECT from unknown[159.203.21.44]
Aug 18 21:03:18 fermi postfix/submissions/smtpd[3214195]: lost connectio
...
show less
2026-08-18T20:39:02.156948+0000 inbound port scan detected by Suricata. src=159.203.21.44:61005 dst= ...
show more2026-08-18T20:39:02.156948+0000 inbound port scan detected by Suricata. src=159.203.21.44:61005 dst=51.68.231.122:3306 proto=TCP. signature="ET SCAN Suspicious inbound to mySQL port 3306" category="Potentially Bad Traffic" sid=2010937 reason=scan_signature.
show less
Blocked by UFW (TCP on 8080)
Source port: 61011
TTL: 241
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8080)
Source port: 61011
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 159.203.21.44) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Apr 26 09:00:14 pop3-login: Info: Disconnected: Disconnected: Too many bad commands (no auth attempt ...
show moreApr 26 09:00:14 pop3-login: Info: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=159.203.21.44, lip=68.183.87.236, TLS, session=<dL/0OVlQZIqfyxUs>
Apr 26 09:00:15 pop3-login: Info: Disconnected: Connection closed: read(size=599) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=159.203.21.44, lip=68.183.87.236, TLS handshaking: read(size=599) failed: Connection reset by peer, session=<3ZIAOllQ1LufyxUs>
...
show less
