159.203.13.36
Classification: Malicious
159.203.13.36 is a malicious IP address in Toronto, CA. 283 sightings from 7 threat sources (Bruteforce, SSH Attacker), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bruteforce login attacker | Blocklist.de | 2026-10-13 09:00:13 | 2026-10-14 09:00:15 | attacker malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-10-13 07:00:22 | 2026-10-14 07:00:16 | attacker malicious-activity | |
| HTTP Spammer | StopForumSpam.com | 2026-03-23 15:17:45 | 2026-06-16 10:04:12 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2025-08-05 06:39:20 | 2026-05-24 20:03:49 | anomalous-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-26 02:20:45 | 2026-03-26 02:20:45 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-26 02:20:42 | 2026-03-26 02:20:42 | malicious-activity | |
| Malicious Host | CIArmy | 2020-12-01 12:44:00 | 2026-03-25 15:09:19 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-06-08 08:43:02 | 2025-07-01 21:57:31 | compromised malicious-activity | |
| SSH Attacker | Blocklist.de | 2025-06-09 08:49:18 | 2025-06-12 09:28:14 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-06-08 07:49:22 | 2025-06-10 20:10:49 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-06-08 07:46:26 | 2025-06-10 19:27:58 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-06-08 07:46:26 | 2025-06-10 17:42:48 | anomalous-activity | |
| Hacking | AbuseIPDB | 2025-06-08 08:15:54 | 2025-06-10 06:27:50 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-06-08 10:56:55 | 2025-06-09 21:09:41 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-11-01 08:00:12 | 2023-11-01 08:00:12 | ||
| Unauthorized scanning of hosts | Blocklist.net.ua | 2020-12-02 09:32:15 | 2020-12-07 19:36:15 | malicious-activity |
Tags
abuse ssh bruteforce bot apache ddos rfi attacker login joomla wordpressWhois information
- AS name
- AS14061 Digitalocean, LLC
- AS registry
- arin
- AS date
- 2015-08-10 00:00:00
- AS CIDR
- 159.203.0.0/20
- CIDR
- 159.203.0.0/16
- Registrant
- Digitalocean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Toronto
- State
- NY
- Postal code
- M5H 2N2
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected]
- First indexed
- 2020-12-01 12:44:00
- Last updated
- 2026-10-14 09:00:15
Malicious IPs in the same CIDR
159.203.9.159 159.203.13.72 159.203.2.100 159.203.2.74 159.203.10.37 159.203.3.90 159.203.12.100 159.203.15.108 159.203.13.36 159.203.6.67 159.203.1.104 159.203.8.155 159.203.13.23 159.203.13.168 159.203.3.27 159.203.6.112 159.203.7.251 159.203.5.70 159.203.15.202 159.203.14.36 159.203.1.197