159.203.13.72
Classification: Malicious
159.203.13.72 is a malicious IP address in Toronto, CA. 6 sightings from 4 threat sources (Unauthorized scanning of hosts), last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-10-13 16:03:36 | 2026-10-16 16:31:47 | attacker malicious-activity reconnaissance | |
| Proxy | IPWhois.io | 2025-02-09 20:51:44 | 2025-02-11 07:40:10 | anonymization | |
| Suspicious Host | AbuseIPDB | 2025-02-10 09:27:41 | 2025-02-11 07:02:41 | anomalous-activity | |
| Malicious Host | CIArmy | 2025-02-09 20:51:43 | 2025-02-09 20:51:43 | malicious-activity |
Tags
abuseWhois information
- AS name
- AS14061 Digitalocean, LLC
- AS registry
- arin
- AS date
- 2015-08-10 00:00:00
- AS CIDR
- 159.203.0.0/20
- CIDR
- 159.203.0.0/16
- Registrant
- Digitalocean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Toronto
- State
- NY
- Postal code
- M5H 2N2
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected]
- First indexed
- 2025-02-09 20:51:43
- Last updated
- 2026-10-16 16:31:47
Malicious IPs in the same CIDR
159.203.2.100 159.203.2.74 159.203.10.37 159.203.3.90 159.203.13.72 159.203.12.100 159.203.15.108 159.203.13.36 159.203.6.67 159.203.1.104 159.203.8.155 159.203.13.23 159.203.13.168 159.203.3.27 159.203.6.112 159.203.7.251 159.203.5.70 159.203.15.202 159.203.14.36 159.203.9.159 159.203.1.197