This IP address has been reported a total of
27
times from
27 distinct
sources.
159.203.139.61 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
159.203.139.61 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more159.203.139.61 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 9B. Report generated by Endlessh Report Generator v1.2.3
show less
2026-02-19T17:45:43.315447+08:00 *hostname* sshd-session[2184394]: Invalid user docker from 159.203. ...
show more2026-02-19T17:45:43.315447+08:00 *hostname* sshd-session[2184394]: Invalid user docker from 159.203.139.61 port 56216
2026-02-19T17:46:38.276315+08:00 *hostname* sshd-session[2184401]: Connection from 159.203.139.61 port 49032 on 199.15.78.48 port 22 rdomain ""
2026-02-19T17:46:39.423588+08:00 *hostname* sshd-session[2184401]: Invalid user jenkins from 159.203.139.61 port 49032
2026-02-19T17:47:33.183021+08:00 *hostname* sshd-session[2184406]: Connection from 159.203.139.61 port 35816 on 199.15.78.48 port 22 rdomain ""
2026-02-19T17:47:34.635114+08:00 *hostname* sshd-session[2184406]: Invalid user jenkins from 159.203.139.61 port 35816
show less
Feb 19 09:34:06 Assets-ubuntu-sfo3a sshd[2592187]: Invalid user pi from 159.203.139.61 port 57024
Fe ...
show moreFeb 19 09:34:06 Assets-ubuntu-sfo3a sshd[2592187]: Invalid user pi from 159.203.139.61 port 57024
Feb 19 09:44:22 Assets-ubuntu-sfo3a sshd[2593809]: Invalid user docker from 159.203.139.61 port 50412
Feb 19 09:45:22 Assets-ubuntu-sfo3a sshd[2593917]: Invalid user docker from 159.203.139.61 port 45910
...
show less
2026-02-19T09:46:29.197805+00:00 edge-fra-2.senko.network sshd-session[1237728]: Invalid user docker ...
show more2026-02-19T09:46:29.197805+00:00 edge-fra-2.senko.network sshd-session[1237728]: Invalid user docker from 159.203.139.61 port 53028
2026-02-19T09:46:30.922900+00:00 edge-fra-2.senko.network sshd-session[1237730]: Invalid user docker from 159.203.139.61 port 32840
...
show less
Fail2Ban sshd ban: Feb 19 09:44:24 N8N-Server sshd[219285]: Connection closed by invalid user docker ...
show moreFail2Ban sshd ban: Feb 19 09:44:24 N8N-Server sshd[219285]: Connection closed by invalid user docker 159.203.139.61 port 58186 [preauth]
show less
2026-02-19T17:33:42.197596+08:00 dh sshd[1588664]: Invalid user pi from 159.203.139.61 port 49466
20 ...
show more2026-02-19T17:33:42.197596+08:00 dh sshd[1588664]: Invalid user pi from 159.203.139.61 port 49466
2026-02-19T17:33:42.490317+08:00 dh sshd[1588664]: Connection closed by invalid user pi 159.203.139.61 port 49466 [preauth]
2026-02-19T17:34:48.306986+08:00 dh sshd[1588746]: Connection closed by authenticating user root 159.203.139.61 port 60786 [preauth]
2026-02-19T17:35:55.878871+08:00 dh sshd[1588962]: Connection closed by authenticating user root 159.203.139.61 port 57770 [preauth]
2026-02-19T17:36:59.773616+08:00 dh sshd[1589109]: Connection closed by authenticating user root 159.203.139.61 port 49640 [preauth]
show less
2026-02-19T04:33:30.168954-05:00 site sshd-session[18724]: Invalid user pi from 159.203.139.61 port ...
show more2026-02-19T04:33:30.168954-05:00 site sshd-session[18724]: Invalid user pi from 159.203.139.61 port 47208
2026-02-19T04:34:35.957227-05:00 site sshd-session[18726]: User root from 159.203.139.61 not allowed because not listed in AllowUsers
2026-02-19T04:35:43.434189-05:00 site sshd-session[18729]: User root from 159.203.139.61 not allowed because not listed in AllowUsers
...
show less
SSH
Anonymous
Feb 19 09:33:58 f2b auth.info sshd[191051]: Invalid user pi from 159.203.139.61 port 60582
Feb 19 09 ...
show moreFeb 19 09:33:58 f2b auth.info sshd[191051]: Invalid user pi from 159.203.139.61 port 60582
Feb 19 09:33:58 f2b auth.info sshd[191051]: Failed password for invalid user pi from 159.203.139.61 port 60582 ssh2
Feb 19 09:35:06 f2b auth.info sshd[191053]: Failed password for root from 159.203.139.61 port 50854 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 27 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩