JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.41.203

159.203.41.203 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 90%: ?

90%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.41.203

Whois 159.203.41.203

IP Abuse Reports for 159.203.41.203:

This IP address has been reported a total of 17 times from 15 distinct sources. 159.203.41.203 was first reported on June 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-17 16:10:22 (2 days ago)	Blocked by UFW (TCP on 2078) Source port: 37008 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 37008 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 159.203.41.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇾 lns.bz	2026-06-17 09:47:50 (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 xmission.com	2026-06-17 08:20:38 (2 days ago)	Blocked by UFW (TCP on 2086) Source port: 35856 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2086) Source port: 35856 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 159.203.41.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sandra361	2026-06-17 07:53:44 (2 days ago)	Port scan detected: 9 attempts across 9 ports (2077,2078,2082,2086,2087,2095,2096,443,80). \| Evidenc ... show more Port scan detected: 9 attempts across 9 ports (2077,2078,2082,2086,2087,2095,2096,443,80). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=159.203.41.203 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=55004 DF PROTO=TCP SPT=60508 DPT=2095 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 gu-alvareza	2026-06-17 07:06:03 (2 days ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇮🇹 Inartis	2026-06-17 06:22:24 (2 days ago)	159.203.41.203 - - [17/Jun/2026:06:22:22 +0000] "GET /.git/HEAD HTTP/1.1" 302 436 "-" "Mozilla/5.0 ( ... show more 159.203.41.203 - - [17/Jun/2026:06:22:22 +0000] "GET /.git/HEAD HTTP/1.1" 302 436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 pearbright	2026-06-17 06:07:25 (2 days ago)	[Wed Jun 17 06:06:51.246609 2026] [php:error] [pid 627489:tid 627489] [client 159.203.41.203:58444] ... show more [Wed Jun 17 06:06:51.246609 2026] [php:error] [pid 627489:tid 627489] [client 159.203.41.203:58444] script '/var/www/html/wp-config.php' not found or unable to stat [Wed Jun 17 06:07:25.357132 2026] [php:error] [pid 627487:tid 627487] [client 159.203.41.203:48430] script '/var/www/html/config.php' not found or unable to stat ... show less	Web App Attack
🇺🇸 MPL	2026-06-17 06:00:26 (2 days ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-17 04:45:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 159.203.41.203 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.203.41.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:45:43.166761 2026] [security2:error] [pid 19149:tid 19149] [client 159.203.41.203:59120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.113"] [uri "/.git/HEAD"] [unique_id "ajImdxkX2TPQ-u6yUcj4pwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2026-06-17 04:06:08 (2 days ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
Anonymous	2026-06-17 04:01:47 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇫🇷 wiredalter	2026-06-17 03:01:11 (2 days ago)	Blocked by fail2ban on o2VPS [2086/tcp] Source Port: 43760 TTL: 44 Packet Length: 60 TOS: 0x00 Anal ... show more Blocked by fail2ban on o2VPS [2086/tcp] Source Port: 43760 TTL: 44 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇹🇼 kk_it_man	2026-06-17 02:40:12 (2 days ago)		Port Scan
🇩🇪 ghostwarriors	2026-06-17 00:50:39 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-06-17 00:25:11 (2 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 209.38.121.133

🇺🇸 198.199.76.105

🇮🇳 165.232.181.126

🇹🇭 147.50.231.135

🇮🇳 143.110.244.44

🇩🇪 104.23.199.144

🇳🇬 102.88.54.83

🇹🇷 78.174.203.93

🇺🇸 68.132.194.248

🇳🇱 45.198.224.21

🇺🇸 44.154.49.27

🇹🇭 203.154.158.195

🇳🇱 185.226.197.58

🇨🇳 182.44.116.87

🇦🇷 181.46.185.223

🇨🇦 172.69.130.19

🇺🇸 147.185.132.230

🇺🇸 47.252.46.218

🇺🇸 44.27.183.74

🇹🇼 198.235.24.57