This IP address has been reported a total of
6,416
times from
1,161 distinct
sources.
103.216.145.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-02T10:28:03.070663+02:00 tor01-ca-pop.as202427.net sshd[1056159]: Invalid user zyx from 103. ...
show more2026-09-02T10:28:03.070663+02:00 tor01-ca-pop.as202427.net sshd[1056159]: Invalid user zyx from 103.216.145.2 port 44386
2026-09-02T10:29:30.968783+02:00 tor01-ca-pop.as202427.net sshd[1056563]: Invalid user alma from 103.216.145.2 port 42230
2026-09-02T10:30:34.720411+02:00 tor01-ca-pop.as202427.net sshd[1056721]: User root from 103.216.145.2 not allowed because not listed in AllowUsers
...
show less
2026-09-02T13:32:09.101039+06:00 passbolt sshd[514932]: Failed password for root from 103.216.145.2 ...
show more2026-09-02T13:32:09.101039+06:00 passbolt sshd[514932]: Failed password for root from 103.216.145.2 port 60448 ssh2
2026-09-02T13:33:26.611145+06:00 passbolt sshd[514972]: Invalid user newuser from 103.216.145.2 port 55656
...
show less
Sep 2 06:38:36 lamp-s-1vcpu-1gb-tor1-01 sshd[2521941]: Invalid user tom from 103.216.145.2 port 532 ...
show moreSep 2 06:38:36 lamp-s-1vcpu-1gb-tor1-01 sshd[2521941]: Invalid user tom from 103.216.145.2 port 53230
Sep 2 06:40:46 lamp-s-1vcpu-1gb-tor1-01 sshd[2522073]: Invalid user choi from 103.216.145.2 port 39668
Sep 2 06:44:44 lamp-s-1vcpu-1gb-tor1-01 sshd[2522220]: Invalid user redis from 103.216.145.2 port 40564
Sep 2 06:45:43 lamp-s-1vcpu-1gb-tor1-01 sshd[2522250]: Invalid user ubuntu from 103.216.145.2 port 33760
Sep 2 06:47:42 lamp-s-1vcpu-1gb-tor1-01 sshd[2522328]: Invalid user cs2server from 103.216.145.2 port 48342
show less
Brute-Force
SSH
Anonymous
Sep 2 06:38:28 flow-dus sshd[1461323]: Invalid user tom from 103.216.145.2 port 49638
Sep 2 06:40: ...
show moreSep 2 06:38:28 flow-dus sshd[1461323]: Invalid user tom from 103.216.145.2 port 49638
Sep 2 06:40:38 flow-dus sshd[1461331]: Invalid user choi from 103.216.145.2 port 36124
Sep 2 06:45:36 flow-dus sshd[1461358]: Invalid user ubuntu from 103.216.145.2 port 58434
...
show less
2026-09-02T07:37:23.229076maoyue-lax1 sshd[4050453]: Disconnected from authenticating user root 103. ...
show more2026-09-02T07:37:23.229076maoyue-lax1 sshd[4050453]: Disconnected from authenticating user root 103.216.145.2 port 52122 [preauth]
2026-09-02T07:38:46.913252maoyue-lax1 sshd[4050480]: Invalid user tom from 103.216.145.2 port 47988
2026-09-02T07:38:47.165480maoyue-lax1 sshd[4050480]: Disconnected from invalid user tom 103.216.145.2 port 47988 [preauth]
2026-09-02T07:39:52.568268maoyue-lax1 sshd[4050536]: Disconnected from authenticating user root 103.216.145.2 port 41188 [preauth]
show less
SSH brute-force attempt from 103.216.145.2 blocked by Houston-Ryzen-Dartnode. 2026-09-01T23:36:50.56 ...
show moreSSH brute-force attempt from 103.216.145.2 blocked by Houston-Ryzen-Dartnode. 2026-09-01T23:36:50.562707-07:00 Ryzen9.dartnode.com sshd[1306908]: Disconnected from authenticating user root 103.216.145.2 port 45154 [preauth]
2026-09-01T23:38:49.483434-07:00 Ryzen9.dartnode.com sshd[1308561]: Connection from 103.216.145.2 port 51200 on 166.0.192.203 port 22 rdomain ""
2026-09-01T23:38:50.829485-07:00 Ryzen9.dartnode.com sshd[1308561]: Invalid user tom from 103.216.145.2 port 51200
show less
Brute-Force
SSH
Anonymous
2026-09-02T06:34:02.379326+00:00 ubuntu sshd[2956143]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-02T06:34:02.379326+00:00 ubuntu sshd[2956143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.216.145.2 user=root
2026-09-02T06:34:04.217212+00:00 ubuntu sshd[2956143]: Failed password for root from 103.216.145.2 port 50252 ssh2
2026-09-02T06:34:04.527230+00:00 ubuntu sshd[2956143]: Disconnected from authenticating user root 103.216.145.2 port 50252 [preauth]
2026-09-02T06:34:04.527230+00:00 ubuntu sshd[2956143]: Disconnected from authenticating user root 103.216.145.2 port 50252 [preauth]
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
Anonymous
2026-09-01T23:52:29.846134-04:00 serysea sshd[63024]: Invalid user ts3bot from 103.216.145.2 port 53 ...
show more2026-09-01T23:52:29.846134-04:00 serysea sshd[63024]: Invalid user ts3bot from 103.216.145.2 port 53608
2026-09-01T23:53:38.140727-04:00 serysea sshd[63038]: Invalid user salary from 103.216.145.2 port 47016
2026-09-01T23:54:39.970688-04:00 serysea sshd[63089]: Invalid user vpnuser from 103.216.145.2 port 40398
...
show less
2026-09-02T04:34:00.174719+02:00 ns3006402 sshd[858819]: Invalid user fs from 103.216.145.2 port 443 ...
show more2026-09-02T04:34:00.174719+02:00 ns3006402 sshd[858819]: Invalid user fs from 103.216.145.2 port 44380
...
show less
Brute-Force
SSH
Showing 1 to
15
of 6416 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩