JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.144.58.203

Activity Trending Down

Abuse confidence score ?

100% Critical

55 reports

30 reporters · latest 2 weeks ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Memphis, Tennessee

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 168.144.58.203

This IP address has been reported a total of 55 times from 30 distinct sources. 168.144.58.203 was first reported on September 5th 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: United States of America with 27 reports; Australia with 7 reports; Hong Kong with 6 reports. The most common categories in these recent reports were: Port Scan 53 times; Brute-Force 6 times; Hacking 5 times; Exploited Host 2 times; DDoS Attack 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-09-08 17:39:34 (2 weeks ago)	Firewall: Within 2026-09-06 21:02:48 - 2026-09-07 02:26:14 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-09-06 21:02:48 - 2026-09-07 02:26:14 CEST(+0200) identified: unallowed access from 168.144.58.203 on uncommon port/s: 2009(tcp:2009),6008(tcp:6008) (2 trials) Fail2ban: Within 2026-09-06 21:02:48 - 2026-09-07 02:26:15 CEST(+0200) banned: 9 times by fail2ban[firewall]; 9 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇮🇳 evicky2002	2026-09-08 00:01:54 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 donarev419	2026-09-07 00:26:54 (2 weeks ago)	Port scan detected on port 2009 (connection without data transfer)	Port Scan
🇩🇪 phil2k	2026-09-07 00:26:19 (2 weeks ago)	fail2ban:recidive:2026-09-06 22:00:31,377 fail2ban.actions [3298995]: NOTICE [firewall] Ban ... show more fail2ban:recidive:2026-09-06 22:00:31,377 fail2ban.actions [3298995]: NOTICE [firewall] Ban 168.144.58.203 2026-09-07 02:26:15,387 fail2ban.actions [3298995]: NOTICE [firewall] Ban 168.144.58.203 show less	DDoS Attack Port Scan Brute-Force
🇺🇸 Aurealize	2026-09-07 00:24:18 (2 weeks ago)	firewall port scanning detected. 2 or more observation(s) from 2026-09-07T00:24:18.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-09-07T00:24:18.000Z through 2026-09-07T00:24:18.000Z. show less	Port Scan
🇺🇸 xmission.com	2026-09-07 00:23:30 (2 weeks ago)	Blocked by UFW (TCP on 2009) Source port: 59830 TTL: 243 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2009) Source port: 59830 TTL: 243 Packet length: 40 TOS: 0x08 This report (for 168.144.58.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-07 00:04:31 (2 weeks ago)	Blocked by UFW (TCP on 2009) Source port: 52918 TTL: 243 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2009) Source port: 52918 TTL: 243 Packet length: 40 TOS: 0x08 This report (for 168.144.58.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-06 23:55:56 (2 weeks ago)	tcp/2009 (17 or more attempts)	Port Scan
Anonymous	2026-09-06 23:53:48 (2 weeks ago)	Sep 6 15:46:32 localhost kernel: [117069118.585406] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 6 15:46:32 localhost kernel: [117069118.585406] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=168.144.58.203 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=236 ID=54321 PROTO=TCP SPT=38396 DPT=6008 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 15:46:32 localhost kernel: [117069118.585441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=168.144.58.203 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=236 ID=54321 PROTO=TCP SPT=38396 DPT=6008 SEQ=3729559918 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 19:53:47 localhost kernel: [117083952.893315] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=168.144.58.203 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=239 ID=54321 PROTO=TCP SPT=59642 DPT=2009 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 6 19:53:47 localhost kernel: [117083952.893338] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=168.144.58.203 DST=[mungedIP2] LEN=4 show less	Port Scan
Anonymous	2026-09-06 23:52:37 (2 weeks ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 Ilop	2026-09-06 23:31:33 (2 weeks ago)	[hp-100] 2 unsolicited packets to honeypot ports 6008,2009 (OCI DShield sensor)	Port Scan
🇺🇸 xmission.com	2026-09-06 23:26:16 (2 weeks ago)	Blocked by UFW (TCP on 2009) Source port: 45516 TTL: 242 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2009) Source port: 45516 TTL: 242 Packet length: 40 TOS: 0x08 This report (for 168.144.58.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 shabi	2026-09-06 23:13:01 (2 weeks ago)	UFW Blocked [2009/TCP] Source: 168.144.58.203:44034 TTL: 245 Lenth: 44 TOS: 0x00	Port Scan
🇺🇸 xmission.com	2026-09-06 23:10:52 (2 weeks ago)	Blocked by UFW (TCP on 2009) Source port: 49415 TTL: 242 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2009) Source port: 49415 TTL: 242 Packet length: 40 TOS: 0x08 This report (for 168.144.58.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 etu brutus	2026-09-06 23:03:05 (2 weeks ago)	168.144.58.203 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 79.124.58.90

🇵🇷 72.50.3.137

🇸🇬 207.166.168.11

🇦🇷 190.246.66.253

🇩🇪 172.70.240.149

🇺🇸 162.216.149.121

🇺🇸 147.182.225.86

🇺🇸 147.182.202.179

🇫🇷 141.94.17.246

🇮🇳 103.104.48.211

🇺🇿 95.172.142.52

🇺🇸 94.228.29.151

🇺🇸 66.132.195.121

🇱🇹 62.60.130.253

🇷🇺 46.147.113.91

🇺🇸 45.79.211.97

🇺🇸 40.124.186.169

🇺🇸 37.209.196.10

🇫🇷 37.187.35.26

🇻🇳 171.231.184.246