JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.57.4

159.203.57.4 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.57.4

Whois 159.203.57.4

IP Abuse Reports for 159.203.57.4:

This IP address has been reported a total of 32 times from 29 distinct sources. 159.203.57.4 was first reported on May 31st 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zupan	2026-06-15 07:01:31 (20 hours ago)	Blocked by UFW on vps [3389/tcp] \| SPT: 46888 \| TTL: 46 \| LEN: 64 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [3389/tcp] \| SPT: 46888 \| TTL: 46 \| LEN: 64 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇰🇷 winter	2026-06-14 23:13:25 (1 day ago)	Connection attemp from 159.203.57.4 to port 22	Brute-Force SSH
🇫🇷 Petre 21_ip	2026-06-14 23:03:54 (1 day ago)	2026-06-15T01:03:53.271403+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-15T01:03:53.271403+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=159.203.57.4 DST=155.133.26.57 LEN=64 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=58242 DPT=5433 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 lechat	2026-06-14 18:52:56 (1 day ago)	2026-06-14T18:52:56.524563+0000 inbound port scan detected by Suricata. src=159.203.57.4:52098 dst=5 ... show more 2026-06-14T18:52:56.524563+0000 inbound port scan detected by Suricata. src=159.203.57.4:52098 dst=51.255.207.147:8080 proto=TCP. signature="ET SCAN Zmap User-Agent (Inbound)" category="Detection of a Network Scan" sid=2029054 reason=scan_signature. show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-14 15:21:48 (1 day ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 3128 CONNECT / User-Agent: Mozilla/5.0 zgrab/0.x Ac ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 3128 CONNECT / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 3128 [1], 22249 [1], 29842 [1], 29840 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇹🇷 SeczarSecureOps	2026-06-14 15:04:16 (1 day ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (20 events in 10min) at 2026-06-14 15:04	Port Scan
🇩🇪 centurion	2026-06-14 14:26:33 (1 day ago)	Blocked by UFW on ns02 [3128/tcp] Source port: 53424 TTL: 43 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [3128/tcp] Source port: 53424 TTL: 43 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇰🇷 demonsword	2026-06-14 10:42:19 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: / show less	Open Proxy Port Scan
🇳🇱 rmvanderspek	2026-06-14 10:35:01 (1 day ago)	DNS flood on TCP or UDP detected.	DDoS Attack
🇺🇸 sefinek.net	2026-06-14 04:25:04 (1 day ago)	Blocked by UFW on NY01 [3390/tcp] \| SPT: 51118 \| TTL: 52 \| LEN: 64 \| TOS: 0x08 • Reported by: github ... show more Blocked by UFW on NY01 [3390/tcp] \| SPT: 51118 \| TTL: 52 \| LEN: 64 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 D3RP4UL	2026-06-14 00:56:26 (2 days ago)	Unauthorized traffic on 1723/pptpd	Port Scan
🇩🇪 ValtonTahiri	2026-06-10 23:05:25 (5 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.203.57.4; proto=UDP; source_port=59602; target_port=1194 show less	Port Scan
🇵🇱 nfsec.pl	2026-06-10 18:12:32 (5 days ago)	Detected: TCP scan on port: 3389 with flags: SYN	Port Scan
🇫🇷 GabrielJST	2026-06-10 17:25:43 (5 days ago)	Port Scan detected from 159.203.57.4 (CA/Canada/-).	Port Scan
🇫🇮 6kilowatti	2026-06-10 15:21:07 (5 days ago)	2026-06-10T18:21:06.704886+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-06-10T18:21:06.704886+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=159.203.57.4 DST=10.0.0.30 LEN=64 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=44865 DPT=1723 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.243

🇰🇪 197.248.207.139

🇲🇽 187.191.48.5

🇧🇷 45.71.123.226

🇷🇴 2.57.122.177

🇺🇸 2a03:2880:7ff:56::

🇺🇸 216.180.246.6

🇧🇬 193.24.211.107

🇺🇸 192.3.13.105

🇮🇷 188.253.64.22

🇧🇷 170.80.65.140

🇺🇸 152.32.182.41

🇻🇳 116.110.216.230

🇨🇦 85.217.149.45

🇩🇪 81.169.154.173

🇺🇸 66.132.172.182

🇺🇸 50.46.141.125

🇨🇴 38.252.93.30

🇺🇸 34.41.247.182

🇺🇸 20.46.244.172