JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.203.39.56

159.203.39.56 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 7%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.203.39.56

Whois 159.203.39.56

IP Abuse Reports for 159.203.39.56:

This IP address has been reported a total of 44 times from 21 distinct sources. 159.203.39.56 was first reported on October 17th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 lakered	2026-06-08 13:07:03 (1 month ago)	Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Automated scan targeting an unauthori ... show more Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Automated scan targeting an unauthorized host or default server sinkhole \| Tech Evidence: JA4H: 2ba905609cd9004b629c7f2b44960255, TLS-JA4-Spoofing-Detected (UA claims Browser but JA4 reports No-HTTP/2: t13d311200), JA4: t13d311200 \| UA: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 show less	Port Scan Bad Web Bot Exploited Host
🇺🇸 MPL	2026-05-24 23:23:29 (1 month ago)	tcp/8080 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-26 18:44:30 (2 months ago)	tcp/1000	Port Scan
Anonymous	2026-04-26 18:43:32 (2 months ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 MPL	2026-04-26 18:41:44 (2 months ago)	tcp ports: 1000,4782 (4 or more attempts)	Port Scan
🇺🇸 MPL	2026-03-01 23:10:52 (4 months ago)	tcp/9000 (3 or more attempts)	Port Scan
🇺🇸 en0	2026-03-01 21:45:36 (4 months ago)	2026-03-01 21:45:36,421 fail2ban.actions [1659093]: NOTICE [sshd] Ban 159.203.39.56	Brute-Force SSH
🇺🇸 Cobalt IT Inc	2026-03-01 21:43:46 (4 months ago)	Mar 1 13:43:02 server01 sshd[5663]: Failed password for mysql from 159.203.39.56 port 35014 ssh2 Ma ... show more Mar 1 13:43:02 server01 sshd[5663]: Failed password for mysql from 159.203.39.56 port 35014 ssh2 Mar 1 13:43:24 server01 sshd[5692]: Failed password for mysql from 159.203.39.56 port 43006 ssh2 ... show less	Brute-Force SSH
🇿🇦 oh.mg	2026-03-01 21:32:46 (4 months ago)	2026-03-01T23:32:43.305827+02:00 chat.me.ke sshd[242934]: Invalid user postgres from 159.203.39.56 p ... show more 2026-03-01T23:32:43.305827+02:00 chat.me.ke sshd[242934]: Invalid user postgres from 159.203.39.56 port 36626 2026-03-01T23:32:43.633352+02:00 chat.me.ke sshd[242934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 2026-03-01T23:32:45.737721+02:00 chat.me.ke sshd[242934]: Failed password for invalid user postgres from 159.203.39.56 port 36626 ssh2 2026-03-01T23:32:43.633352+02:00 chat.me.ke sshd[242934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 2026-03-01T23:32:45.737721+02:00 chat.me.ke sshd[242934]: Failed password for invalid user postgres from 159.203.39.56 port 36626 ssh2 ... show less	Brute-Force SSH
🇺🇸 en0	2026-03-01 21:23:58 (4 months ago)	2026-03-01 21:23:57,599 fail2ban.actions [1659093]: NOTICE [sshd] Ban 159.203.39.56	Brute-Force SSH
🇨🇦 hpg	2026-03-01 21:23:07 (4 months ago)	28 invalid SSH login attempts from 159.203.39.56 in the last 0.4 hours	Brute-Force SSH
🇺🇸 Cobalt IT Inc	2026-03-01 21:21:59 (4 months ago)	Mar 1 13:21:34 server01 sshd[4193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Mar 1 13:21:34 server01 sshd[4193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 Mar 1 13:21:36 server01 sshd[4193]: Failed password for invalid user test from 159.203.39.56 port 41740 ssh2 Mar 1 13:21:58 server01 sshd[4219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 ... show less	Brute-Force SSH
🇺🇸 oralunal	2026-03-01 21:11:20 (4 months ago)	IP banned by Fail2Ban in jail sshd auth.log ah-app-1 ...	SSH
Anonymous	2026-03-01 21:01:43 (4 months ago)	2026-03-01T23:00:29.040812+02:00 mail sshd[1533914]: Failed password for root from 159.203.39.56 por ... show more 2026-03-01T23:00:29.040812+02:00 mail sshd[1533914]: Failed password for root from 159.203.39.56 port 42280 ssh2 2026-03-01T23:01:03.869255+02:00 mail sshd[1533962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 user=root 2026-03-01T23:01:05.801270+02:00 mail sshd[1533962]: Failed password for root from 159.203.39.56 port 60478 ssh2 2026-03-01T23:01:39.706670+02:00 mail sshd[1533984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 user=root 2026-03-01T23:01:41.579994+02:00 mail sshd[1533984]: Failed password for root from 159.203.39.56 port 35742 ssh2 ... show less	Brute-Force SSH
🇿🇦 oh.mg	2026-03-01 21:01:42 (4 months ago)	2026-03-01T23:00:29.125820+02:00 chat.me.ke sshd[86883]: Failed password for root from 159.203.39.56 ... show more 2026-03-01T23:00:29.125820+02:00 chat.me.ke sshd[86883]: Failed password for root from 159.203.39.56 port 39406 ssh2 2026-03-01T23:01:04.135770+02:00 chat.me.ke sshd[89518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 user=root 2026-03-01T23:01:06.205740+02:00 chat.me.ke sshd[89518]: Failed password for root from 159.203.39.56 port 35406 ssh2 2026-03-01T23:01:39.152261+02:00 chat.me.ke sshd[92485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.39.56 user=root 2026-03-01T23:01:41.025755+02:00 chat.me.ke sshd[92485]: Failed password for root from 159.203.39.56 port 58242 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 44.75.41.253

🇨🇴 190.143.29.50

🇰🇷 115.91.48.142

🇷🇴 92.118.39.49

🇺🇸 66.132.224.25

🇰🇷 59.27.123.101

🇺🇸 44.107.241.30

🇺🇸 35.237.94.18

🇭🇰 223.197.153.135

🇺🇸 198.98.56.205

🇵🇱 194.165.16.161

🇵🇹 160.224.116.220

🇵🇰 110.38.250.236

🇻🇳 103.176.20.115

🇺🇸 100.29.192.12

🇺🇸 66.132.172.122

🇺🇸 65.49.1.147

🇺🇸 44.38.111.59

🇦🇷 181.191.220.137

🇺🇸 98.82.52.232