Started here: http://stayaway2.blogspot.nl/2014/05/ssh-rootkit-ebury-category-malicious-ip.html
Nice resource to look-up IP: http://www.blocklist.de/fr/view.html?ip=203.153.108.227
Currently offline: http://www.phishtank.com/phish_detail.php?phish_id=2484225
Nice resources: http://www.infiltrated.net/blacklisted
Also look here: http://honey811.rssing.com/chan-15058733/all_p723.html
Background reading: http://www.bloglovin.com/blogs/web-security-awareness-towards-cybercriminals-11476185/ssh-rootkit-ebury-category-malicious-ip-203153108227-2878651129/
Other resources: https://www.megarbl.net/blocking_list.php?ip=203.153.108.227
And naturally here: https://www.virustotal.com/en/ip-address/203.153.108.227/information/
or here: https://www.projecthoneypot.org/ip_203.153.108.227
and another one: http://cleantalk.org/blacklists/203.153.108.227
polonus