JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.28.248

159.203.28.248 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 88%: ?

88%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.28.248

Whois 159.203.28.248

IP Abuse Reports for 159.203.28.248:

This IP address has been reported a total of 24 times from 21 distinct sources. 159.203.28.248 was first reported on November 24th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Entalpi.net	2026-07-09 07:34:42 (2 hours ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 xmission.com	2026-07-08 19:24:36 (14 hours ago)	Blocked by UFW (TCP on 1180) Source port: 61444 TTL: 50 Packet length: 64 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 1180) Source port: 61444 TTL: 50 Packet length: 64 TOS: 0x08 This report (for 159.203.28.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 thororen	2026-07-08 15:33:18 (18 hours ago)	Blocked by UFW [3390/tcp] Source port: 63002 TTL: 52 Packet length: 64 TOS: 0x00 This report was ge ... show more Blocked by UFW [3390/tcp] Source port: 63002 TTL: 52 Packet length: 64 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-07-08 15:05:42 (18 hours ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt, 8080/HTTP-proxy \| Proto: TCP(2) \| Flags: all SYN \| TT ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt, 8080/HTTP-proxy \| Proto: TCP(2) \| Flags: all SYN \| TTL: 46 \| Len: 64B(2x) \| Win: 65535(2) \| F2B/ufw-honeypot@2026-07-08T15:05:42Z show less	Port Scan Hacking
🇫🇷 dusfor72	2026-07-08 14:53:57 (18 hours ago)	aggressive portscan ...	Port Scan
🇫🇮 6kilowatti	2026-07-08 14:47:29 (19 hours ago)	2026-07-08T17:47:28.392453+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-08T17:47:28.392453+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=159.203.28.248 DST=5.61.88.83 LEN=64 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=TCP SPT=62640 DPT=9201 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 iNetWorker	2026-07-07 00:05:50 (2 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 kingjan1999	2026-07-06 11:03:25 (2 days ago)	Blocked by UFW [12345/tcp] \| SPT: 55797 \| TTL: 50 \| LEN: 64 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [12345/tcp] \| SPT: 55797 \| TTL: 50 \| LEN: 64 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 ShadowWhisperer	2026-07-06 06:48:38 (3 days ago)	RDP	Port Scan
🇹🇷 Threat.live	2026-07-05 07:30:02 (4 days ago)	Suspicious Connection Attempts	Brute-Force
🇳🇱 ByeByte API	2026-07-05 01:44:11 (4 days ago)	byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-05T01:44:10Z. Source port 55865. TCP fl ... show more byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-05T01:44:10Z. Source port 55865. TCP flags: SYN. Packet: 64B, TTL 48, window 65535, IP id 0. Single packet, dropped at firewall. p0f: OS Mac OS X (generic match), 16 hops, link Ethernet or modem. show less	Port Scan
🇳🇱 VMHeaven.io	2026-07-05 01:44:10 (4 days ago)	Blocked by UFW [3389/tcp] Source port: 55865 TTL: 47 Packet length: 64	Port Scan Hacking Brute-Force
🇳🇱 ByeByte API	2026-07-05 01:44:10 (4 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 3389. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 3389. Single burst at 2026-07-05 01:44 UTC. show less	Port Scan
🇧🇬 Stoyko Stoykov	2026-07-05 01:38:31 (4 days ago)	159.203.28.248 - - [05/Jul/2026:04:38:31 +0300] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84E ... show more 159.203.28.248 - - [05/Jul/2026:04:38:31 +0300] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 400 150 "-" "-" ... show less	Hacking Web App Attack
🇯🇵 jay hung	2026-07-05 01:21:20 (4 days ago)	2026-07-05T01:21:20.163028+00:00 quarktech kernel: [1859137.696175] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-05T01:21:20.163028+00:00 quarktech kernel: [1859137.696175] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=159.203.28.248 DST=172.237.20.248 LEN=42 TOS=0x00 PREC=0x00 TTL=49 ID=35684 DF PROTO=UDP SPT=46734 DPT=8443 LEN=22 ... show less	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 89.121.255.194

🇫🇷 85.217.140.7

🇳🇱 45.148.10.152

🇮🇳 27.123.114.190

🇷🇺 176.192.220.59

🇹🇷 176.41.25.57

🇯🇴 176.28.158.114

🇩🇪 167.94.146.58

🇺🇸 162.216.150.170

🇭🇰 150.5.145.9

🇺🇸 64.62.156.10

🇸🇬 47.82.55.63

🇳🇱 45.148.10.95

🇺🇸 44.85.10.151

🇺🇸 44.81.137.77

🇬🇧 2a06:4883:7000::83

🇰🇷 220.125.120.231

🇳🇱 193.176.31.204

🇨🇳 117.149.196.215

🇨🇭 107.189.10.124