This IP address has been reported a total of
60
times from
53 distinct
sources.
159.203.130.240 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
Anonymous
2026-07-30T15:18:30.279200+00:00 ubuntu sshd[4133885]: Failed password for root from 159.203.130.240 ...
show more2026-07-30T15:18:30.279200+00:00 ubuntu sshd[4133885]: Failed password for root from 159.203.130.240 port 40148 ssh2
2026-07-30T15:18:31.479823+00:00 ubuntu sshd[4133885]: Connection closed by authenticating user root 159.203.130.240 port 40148 [preauth]
2026-07-30T15:18:31.479823+00:00 ubuntu sshd[4133885]: Connection closed by authenticating user root 159.203.130.240 port 40148 [preauth]
2026-07-30T15:21:24.734054+00:00 ubuntu sshd[4134066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.130.240 user=root
2026-07-30T15:21:26.144969+00:00 ubuntu sshd[4134066]: Failed password for root from 159.203.130.240 port 43002 ssh2
...
show less
SSH Brute force: 42 attempts were recorded from 159.203.130.240
2026-07-30T16:15:01+02:00 Invalid us ...
show moreSSH Brute force: 42 attempts were recorded from 159.203.130.240
2026-07-30T16:15:01+02:00 Invalid user user123 from 159.203.130.240 port 38438
2026-07-30T16:17:38+02:00 Connection closed by authenticating user root 159.203.130.240 port 36418 [preauth]
2026-07-30T16:20:33+02:00 Invalid user git from 159.203.130.240 port 42438
2026-07-30T16:23:17+02:00 Connection closed by authenticating user root 159.203.130.240 port 59776 [preauth]
2026-07-30T16:25:57+02:00 Connection closed by authenticating user root 159.203.130.240 port 44200 [preauth]
2026-07-30T16:28:39+02:00 Connection closed by authenticating user root 159.203.130.240 port 40352 [preauth]
2026-07-30T16:31:25+02:00 Invalid user gerami from 159.203.130.240 port 35010
2026-07-30T16:34:18+02:00 Connection closed by authenticating user root 159.203.130.240 port 56524 [preauth]
2026-07-30T16:37:06+02:00 Connection closed by authenticati
show less
Jul 30 14:14:03 mail sshd[1960530]: Invalid user user123 from 159.203.130.240 port 41304
Jul 30 14:1 ...
show moreJul 30 14:14:03 mail sshd[1960530]: Invalid user user123 from 159.203.130.240 port 41304
Jul 30 14:19:27 mail sshd[1960857]: Invalid user git from 159.203.130.240 port 50186
Jul 30 14:30:21 mail sshd[1961593]: Invalid user gerami from 159.203.130.240 port 42436
...
show less