159.203.38.155

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
89 reports
67 reporters · latest 4 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇨🇦 Canada
City
Toronto, Ontario
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

159.203.38.155 has been reported 89 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
89 from 67 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇺🇸 MPL
tcp/8087
Port Scan
🇺🇸 MPL
tcp ports: 2000,8087 (3 or more attempts)
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 8888
Port Scan Hacking Exploited Host
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.203.38.155 (CA/Canada/-): 1 in the last 3600 secs (0-195)
Hacking
🇩🇪 evilrave
159.203.38.155 - - [22/May/2026:23:33:25 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 444 0 Host="[REDACTED_IP]" SNI="-" ...
Bad Web Bot
🇺🇸 bitblockit
Port Scan
🇺🇸 bitblockit
Port Scan
🇩🇪 ITSNF
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=1080,1180,12324
Port Scan Hacking
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
🇸🇪 NordhTech
More than 3 malicious connection attempts, trying port(s) 4500/tcp, then blocked from services ...
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (19 bytes of payload); 3390 [1] TCP
Port Scan
Anonymous
Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 8443/tcp (HTTPS-alt))
Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇪 213.64.163.27
🇲🇽 158.23.24.128
🇩🇿 196.20.73.90
🇭🇺 195.228.79.114
🇮🇳 182.64.235.115
🇩🇪 167.94.146.59
🇺🇸 157.173.200.83
🇨🇳 117.133.160.214
🇭🇰 152.32.128.214
🇸🇮 102.220.160.147
🇳🇱 93.152.220.43
🇳🇱 93.123.109.167
🇺🇸 75.66.40.30
🇺🇸 70.183.209.142
🇨🇦 70.54.66.254
🇺🇸 52.179.208.167
feedback