JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.203.44.68

Neutral Activity

Abuse Confidence Score

0% Low Risk

15 reports

13 reporters · latest 3 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.203.44.68 has been reported 15 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

15 from 13 distinct reporters

First reported

March 17th 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-27 05:12:00 UTC · (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 FeG Deutschland	2026-07-27 05:04:57 UTC · (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 MPL	2026-07-26 17:42:31 UTC · (3 months ago)	tcp/443 (2 or more attempts)	Port Scan
🇺🇸 Axel	2026-07-26 17:09:15 UTC · (3 months ago)	Blocked by UFW on MVI [1911/tcp] \| SPT: 61004 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-26 17:00:52 UTC · (3 months ago)	Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: ... show more Honeypot hit: HTTP/1.1 request on 8086 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8086 [1] TCP show less	Web App Attack
Anonymous	2026-07-26 16:42:44 UTC · (3 months ago)	denied traffic to a honeypot network. destination port 4782.	Port Scan Hacking
🇦🇱 router.al	2026-07-15 01:37:03 UTC · (3 months ago)	07/15/2026-01:37:03.158603 159.203.44.68 Protocol: 6 GPL WEB_SERVER 403 Forbidden	Port Scan
🇺🇸 Axel	2026-06-11 18:18:19 UTC · (5 months ago)	Blocked by UFW on MVI [85/tcp] \| SPT: 61008 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-06-11 18:13:19 UTC · (5 months ago)	Blocked by UFW (TCP on 8000) Source port: 61014 TTL: 239 Packet length: 44 TOS: 0x08 This report (for 159.203.44.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇯🇵 jay hung	2026-06-11 01:37:35 UTC · (5 months ago)	2026-06-11T01:37:35.111926+00:00 quarktech kernel: [976697.676030] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=159.203.44.68 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=32877 PROTO=TCP SPT=61009 DPT=8090 WIN ... show more 2026-06-11T01:37:35.111926+00:00 quarktech kernel: [976697.676030] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=159.203.44.68 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=32877 PROTO=TCP SPT=61009 DPT=8090 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 antivirus_5846	2026-03-17 08:38:33 UTC · (7 months ago)	Mar 17 09:38:20 mail sshd[986322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.44.68 Mar 17 09:38:23 mail sshd[986322]: Failed password for invalid user cloudera from 159.203.44.68 port 36450 ssh2 ... show more Mar 17 09:38:20 mail sshd[986322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.44.68 Mar 17 09:38:23 mail sshd[986322]: Failed password for invalid user cloudera from 159.203.44.68 port 36450 ssh2 Mar 17 09:38:28 mail sshd[986326]: Invalid user chris from 159.203.44.68 port 51852 Mar 17 09:38:30 mail sshd[986326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.44.68 Mar 17 09:38:32 mail sshd[986326]: Failed password for invalid user chris from 159.203.44.68 port 51852 ssh2 ... show less	Brute-Force SSH
🇦🇺 marshy.com.au	2026-03-17 08:38:26 UTC · (7 months ago)	(sshd) Failed SSH login from 159.203.44.68 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Mar 17 19:35:42 ded01 sshd[29773]: Did not receive identification string from 159.203.44.68 port 55904 Mar 17 19:36 ... show more (sshd) Failed SSH login from 159.203.44.68 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Mar 17 19:35:42 ded01 sshd[29773]: Did not receive identification string from 159.203.44.68 port 55904 Mar 17 19:36:09 ded01 sshd[30003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.44.68 user=root Mar 17 19:36:11 ded01 sshd[30003]: Failed password for root from 159.203.44.68 port 34200 ssh2 Mar 17 19:38:20 ded01 sshd[31245]: Invalid user cloudera from 159.203.44.68 port 48982 Mar 17 19:38:23 ded01 sshd[31245]: Failed password for invalid user cloudera from 159.203.44.68 port 48982 ssh2 show less	Port Scan
🇫🇷 OrchidsRadiant	2026-03-17 08:38:20 UTC · (7 months ago)	2026-03-17T08:36:10.087689+00:00 helium sshd-session[1845569]: Failed password for root from 159.203.44.68 port 60978 ssh2 2026-03-17T08:36:11.218558+00:00 helium sshd-session[1845569]: Connection closed by authenticating user root 159.203.44.68 port ... show more 2026-03-17T08:36:10.087689+00:00 helium sshd-session[1845569]: Failed password for root from 159.203.44.68 port 60978 ssh2 2026-03-17T08:36:11.218558+00:00 helium sshd-session[1845569]: Connection closed by authenticating user root 159.203.44.68 port 60978 [preauth] 2026-03-17T08:38:20.207753+00:00 helium sshd-session[1846021]: Invalid user cloudera from 159.203.44.68 port 55716 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-03-17 08:35:32 UTC · (7 months ago)	tcp/22	Port Scan
🇩🇪 ps-center	2026-03-17 08:35:26 UTC · (7 months ago)	SS4-W: TCP-Scanner. Port: 22	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇬 197.199.224.52

🇮🇳 157.245.101.122

🇺🇸 142.93.7.23

🇵🇭 110.54.142.96

🇿🇲 102.212.181.2

🇺🇸 66.228.41.127

🇺🇸 66.132.159.66

🇸🇬 62.146.234.76

🇮🇳 49.43.248.239

🇺🇸 48.216.241.49

🇺🇸 40.67.178.208

🇧🇪 35.210.99.13

🇺🇸 35.148.177.130

🇹🇼 203.75.213.2

🇺🇸 172.56.90.180

🇳🇱 170.168.30.112

🇳🇱 160.119.76.157

🇫🇮 147.185.133.26

🇺🇸 139.87.112.171

🇬🇧 138.68.167.99