203.159.90.219

🇳🇱Lelystad, Flevoland, The Netherlands · AS210558 1337 Services GmbH

Inside 3 reported networks. 203.159.90.0/24 is listed by Emergingthreats - Block IP (Listed by rules.emergingthreats.net) Hacking Vulnerability Scan, last 48 minutes ago; each address inside gets 0.4% of a report. 203.159.90.0/24 is listed by Spamhaus DROP (Spamhaus DROP) Phishing Email Spam, last 39 minutes ago; each address inside gets 0.4% of a report. 203.159.90.0/24 is listed by Firehol Level1 (Listed by raw.githubusercontent.com) Port Scan SSH Vulnerability Scan, last 13 minutes ago; each address inside gets 0.4% of a report.

A network report is spread across the network, so small networks weigh more per address and larger ones very little.

60%

Abuse confidence: Medium

Reported 20 times by 4 reporters, most recently 23 hours ago.

What it was reported for

Reports

When	Reporter	Categories	Comment
23 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
23 hours ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
43 hours ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
47 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
47 hours ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
2 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
2 days ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
3 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
3 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
3 days ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
4 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
4 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
4 days ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
5 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
5 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
6 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
7 days ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de
7 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
8 days ago	Automated feed	FTP Brute-Force Brute-Force Credential Stuffing	Listed by lists.blocklist.de

Details

Version: IPv4
Tor exit: no
Hostname: 203.159.90.219.powered.by.rdp.sh
ASN: AS210558
Network: 1337 Services GmbH
Country: 🇳🇱 The Netherlands (EU)
Region: Flevoland
City: Lelystad (approx.)
First seen: 26 Oct 2026
Last seen: 2 Nov 2026

Location and network: IP Geolocation by DB-IP

Reported nearby

Other addresses in the same /24 reported in the last 90 days.

Same lookup from a script

curl -s "https://isipsafe.com/api/v1/check?ip=203.159.90.219"

Check the surrounding /24 · API docs