This IP address has been reported a total of
1,029
times from
349 distinct
sources.
159.203.108.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected multiple authentication failures and invalid user attempts from IP address 159.203.108.2 on ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 159.203.108.2 on [PT] Lis-1 Node.
show less
2026-06-16T08:26:04.184120+02:00 server sshd-session[5005]: banner exchange: Connection from 159.203 ...
show more2026-06-16T08:26:04.184120+02:00 server sshd-session[5005]: banner exchange: Connection from 159.203.108.2 port 38563: invalid format [preauth]
...
show less
Jun 15 20:38:14 sterling sshd[2211244]: Failed password for root from 159.203.108.2 port 49587 ssh2
...
show moreJun 15 20:38:14 sterling sshd[2211244]: Failed password for root from 159.203.108.2 port 49587 ssh2
Jun 15 20:38:45 sterling sshd[2211330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.108.2 user=root
Jun 15 20:38:48 sterling sshd[2211330]: Failed password for root from 159.203.108.2 port 56378 ssh2
...
show less
Jun 12 07:43:06 wh02 sshd[1348369]: Connection closed by authenticating user root 159.203.108.2 port ...
show moreJun 12 07:43:06 wh02 sshd[1348369]: Connection closed by authenticating user root 159.203.108.2 port 60234 [preauth]
Jun 12 07:43:09 wh02 sshd[1348373]: Connection closed by authenticating user root 159.203.108.2 port 60474 [preauth]
Jun 12 07:43:15 wh02 sshd[1348376]: Connection closed by authenticating user root 159.203.108.2 port 60729 [preauth]
Jun 12 07:43:20 wh02 sshd[1348378]: Connection closed by authenticating user root 159.203.108.2 port 33543 [preauth]
Jun 12 07:43:25 wh02 sshd[1348423]: Connection closed by authenticating user root 159.203.108.2 port 35687 [preauth]
Jun 12 07:43:29 wh02 sshd[1348430]: Connection closed by authenticating user root 159.203.108.2 port 37181 [preauth]
Jun 12 07:43:33 wh02 sshd[1348454]: Connection closed by authenticating user root 159.203.108.2 port 37454 [preauth]
Jun 12 07:43:39 wh02 sshd[1348474]: Connection closed by authenticating user root 159.203.108.2 port 37748 [preauth]
Jun 12 07:43:43 wh02 sshd[1348482]: Connection closed by authent
show less
2026-06-04T11:25:53.992945+03:00 deltachat.me sshd[1783433]: Failed password for root from 159.203.1 ...
show more2026-06-04T11:25:53.992945+03:00 deltachat.me sshd[1783433]: Failed password for root from 159.203.108.2 port 47063 ssh2
2026-06-04T11:26:01.660872+03:00 deltachat.me sshd[1784105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.108.2 user=root
2026-06-04T11:26:04.531973+03:00 deltachat.me sshd[1784105]: Failed password for root from 159.203.108.2 port 48368 ssh2
2026-06-04T11:26:10.667124+03:00 deltachat.me sshd[1785215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.108.2 user=root
2026-06-04T11:26:12.439474+03:00 deltachat.me sshd[1785215]: Failed password for root from 159.203.108.2 port 49176 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T02:38:55.398058+00:00 mail sshd[1951831]: Invalid user user from 159.203.108.2 port 50801 ...
show more2026-06-04T02:38:55.398058+00:00 mail sshd[1951831]: Invalid user user from 159.203.108.2 port 50801
2026-06-04T02:39:06.573277+00:00 mail sshd[1951836]: Invalid user user from 159.203.108.2 port 51257
2026-06-04T02:39:11.404657+00:00 mail sshd[1951887]: Invalid user user from 159.203.108.2 port 53140
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1029 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩