JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.161.16.196

103.161.16.196 was found in our database!

This IP was reported 2,933 times. Confidence of Abuse is 100%: ?

100%

ISP	BK INFORMATION SYSTEM JOINT STOCK COMPANY
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135967
Hostname(s)	host1653479969
Domain Name	bksi.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.161.16.196

Whois 103.161.16.196

IP Abuse Reports for 103.161.16.196:

This IP address has been reported a total of 2,933 times from 791 distinct sources. 103.161.16.196 was first reported on December 11th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 KnightIndustries	2025-12-23 02:50:50 (5 months ago)	2025-12-23T03:50:42.440060+01:00 milkyway sshd[353406]: Failed password for root from 103.161.16.196 ... show more 2025-12-23T03:50:42.440060+01:00 milkyway sshd[353406]: Failed password for root from 103.161.16.196 port 36668 ssh2 2025-12-23T03:50:47.726618+01:00 milkyway sshd[353412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root 2025-12-23T03:50:49.549336+01:00 milkyway sshd[353412]: Failed password for root from 103.161.16.196 port 50242 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2025-12-22 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇳 ThreatBook.io	2025-12-22 22:59:53 (5 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/103.161.16.196	SSH
🇹🇷 rtbh.com.tr	2025-12-22 20:10:36 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇺 marshy.com.au	2025-12-22 15:39:42 (5 months ago)	(sshd) Failed SSH login from 103.161.16.196 (host1653479969): 5 in the last 3600 secs; Ports: ; Dir ... show more (sshd) Failed SSH login from 103.161.16.196 (host1653479969): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Dec 23 02:39:31 ded01 sshd[22815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root Dec 23 02:39:33 ded01 sshd[22815]: Failed password for root from 103.161.16.196 port 44640 ssh2 Dec 23 02:39:34 ded01 sshd[22850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root Dec 23 02:39:37 ded01 sshd[22850]: Failed password for root from 103.161.16.196 port 56320 ssh2 Dec 23 02:39:38 ded01 sshd[22887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root show less	Port Scan
🇺🇸 Lian	2025-12-22 00:30:17 (5 months ago)	Reported by Fail2Ban: 2025-12-21 06:08:42,843 fail2ban.actions [858]: NOTICE [sshd] Ban 103. ... show more Reported by Fail2Ban: 2025-12-21 06:08:42,843 fail2ban.actions [858]: NOTICE [sshd] Ban 103.161.16.196 show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-22 00:10:34 (5 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-21 20:10:34 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 zwh	2025-12-21 18:01:58 (5 months ago)	SSH Brute-Force	Brute-Force SSH
🇹🇷 zumbo.net	2025-12-21 16:42:01 (5 months ago)	2025-12-21T19:41:57.941215+03:00 vpn.zumbo.net sshd[62369]: pam_unix(sshd:auth): authentication fail ... show more 2025-12-21T19:41:57.941215+03:00 vpn.zumbo.net sshd[62369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root 2025-12-21T19:42:00.618408+03:00 vpn.zumbo.net sshd[62369]: Failed password for root from 103.161.16.196 port 43188 ssh2 ... show less	Brute-Force SSH
🇰🇪 oh.mg	2025-12-21 08:45:58 (5 months ago)	2025-12-21T11:45:39.004196+03:00 deltachat.me sshd[581342]: Failed password for root from 103.161.16 ... show more 2025-12-21T11:45:39.004196+03:00 deltachat.me sshd[581342]: Failed password for root from 103.161.16.196 port 42338 ssh2 2025-12-21T11:45:41.956230+03:00 deltachat.me sshd[581786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root 2025-12-21T11:45:44.311399+03:00 deltachat.me sshd[581786]: Failed password for root from 103.161.16.196 port 47658 ssh2 2025-12-21T11:45:55.315753+03:00 deltachat.me sshd[582672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.16.196 user=root 2025-12-21T11:45:57.259359+03:00 deltachat.me sshd[582672]: Failed password for root from 103.161.16.196 port 54730 ssh2 ... show less	Brute-Force SSH
🇺🇸 MPL	2025-12-21 07:41:27 (5 months ago)	tcp/22 (8 or more attempts)	Port Scan
🇺🇸 MPL	2025-12-21 07:41:27 (5 months ago)	tcp/22 (4 or more attempts)	Port Scan
🇩🇪 ghostwarriors	2025-12-21 04:20:19 (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez	2025-12-20 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 2806 to 2820 of 2933 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.182.108

🇧🇷 177.55.157.59

🇮🇩 140.213.6.237

🇷🇺 89.113.137.1

🇨🇳 1.24.16.216

🇺🇸 162.240.211.126

🇳🇱 160.211.64.100

🇹🇯 109.75.50.17

🇯🇲 72.27.199.212

🇧🇾 46.216.198.132

🇧🇪 34.78.106.127

🇺🇸 216.25.89.119

🇨🇳 202.46.62.97

🇺🇸 199.127.60.187

🇨🇷 190.113.115.154

🇲🇽 186.96.145.241

🇺🇸 172.212.224.40

🇺🇸 161.35.122.5

🇰🇪 154.159.237.162

🇫🇮 147.185.133.135