This IP address has been reported a total of
19
times from
12 distinct
sources.
103.159.248.56 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Finland
with 8
reports;
Germany
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Port Scan
12
times;
SSH
8
times;
Brute-Force
8
times;
Hacking
2
times;
IoT Targeted
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T2 ...
show moreCowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T20:45:04 UTC. Usernames tried: root\x00\x00. Passwords tried: telnet. Source: Cowrie honeypot (SSH/Telnet)
show less
Cowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T2 ...
show moreCowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T20:45:04 UTC. Usernames tried: root\x00\x00. Passwords tried: telnet. Source: Cowrie honeypot (SSH/Telnet)
show less
This IP address carried out 2 port scanning attempts on 19-10-2026. For more information or to repor ...
show moreThis IP address carried out 2 port scanning attempts on 19-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Cowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T2 ...
show moreCowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T20:45:04 UTC. Usernames tried: root\x00\x00. Passwords tried: telnet. Source: Cowrie honeypot (SSH/Telnet)
show less
Cowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T2 ...
show moreCowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T20:45:04 UTC. Usernames tried: root\x00\x00. Passwords tried: telnet. Source: Cowrie honeypot (SSH/Telnet)
show less
Cowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T2 ...
show moreCowrie SSH honeypot: 118 attempt(s) from 103.159.248.56. Period: 2026-10-13T20:44:52 to 2026-10-13T20:45:04 UTC. Usernames tried: root\x00\x00. Passwords tried: telnet. Source: Cowrie honeypot (SSH/Telnet)
show less
This IP address carried out 2 port scanning attempts on 14-10-2026. For more information or to repor ...
show moreThis IP address carried out 2 port scanning attempts on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Blocked by UFW (TCP on 23)
Source port: 51515
TTL: 52
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 51515
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 103.159.248.56) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less