159.203.21.205

Classification: Malicious

159.203.21.205 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-02. Network: AS14061 Digitalocean, LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2026-07-16 11:12:31 2026-09-02 09:12:01 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2026-07-16 11:12:29 2026-09-02 09:12:00 attacker malicious-activity
Malicious Host CIArmy 2026-07-03 20:02:33 2026-09-01 20:02:25 attacker malicious-activity
Port Scanner AbuseIPDB 2026-05-22 07:01:21 2026-07-24 07:44:52 anomalous-activity attacker malicious-activity reconnaissance
Bruteforce AbuseIPDB 2026-05-19 07:25:03 2026-07-23 02:16:54 attacker malicious-activity
Hacking AbuseIPDB 2026-05-19 07:23:58 2026-07-23 02:16:54 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-05-19 07:25:03 2026-07-23 01:00:57 attacker malicious-activity
Malicious Host AbuseIPDB 2026-07-12 09:23:13 2026-07-22 16:06:34 attacker compromised malicious-activity
Phishing AbuseIPDB 2026-07-13 15:08:54 2026-07-13 15:08:54 malicious-activity phishing
Mail Spammer AbuseIPDB 2026-07-13 15:08:54 2026-07-13 15:08:54 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-06-12 04:31:26 2026-07-12 13:48:40 anomalous-activity attacker malicious-activity
Suspicious Host AbuseIPDB 2026-03-18 23:45:36 2026-03-18 23:45:36 anomalous-activity
HTTP bot Blocklist.de 2023-06-01 03:46:10 2023-06-02 03:35:55 malicious-activity

Tags

attacker spam bruteforce bot

Whois information

AS name
AS14061 Digitalocean, LLC
AS registry
arin
AS date
2015-08-10 00:00:00
AS CIDR
159.203.16.0/20
CIDR
159.203.0.0/16
Registrant
Digitalocean, LLC
Address
101 Ave of the Americas FL2
City
Toronto
State
NY
Postal code
M4S
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected]
First indexed
2023-06-01 03:46:10
Last updated
2026-09-02 09:12:19

Malicious IPs in the same CIDR

159.203.25.239 159.203.22.199 159.203.16.102 159.203.21.205 159.203.26.126 159.203.26.39 159.203.22.144 159.203.17.75 159.203.19.40 159.203.25.248 159.203.21.104 159.203.28.55 159.203.23.243 159.203.21.131 159.203.22.136