JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.97.103.198

Recent Activity

Abuse Confidence Score

100% Critical

157 reports

80 reporters · latest 13 hours ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi3704689.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

157 from 80 distinct reporters

First reported

October 31st 2026

Most recent report

13 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 37 🇩🇪 Germany 26 🇫🇮 Finland 17

Most common categories SSH 149 Brute-Force 145 Port Scan 6 Hacking 5 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-11-14 06:16:15 UTC · (13 hours ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇫🇷 Samuel La Manna	2026-11-05 08:17:39 UTC · (1 week ago)	SSH brute-force against my server: 9 failed attempts, usernames tried: root.	Brute-Force SSH
🇺🇸 Anybody9975	2026-11-02 18:59:59 UTC · (1 week ago)	8 SSH login attempts on 2026-11-02	Brute-Force SSH
🇱🇺 SiteXL	2026-11-02 17:06:01 UTC · (1 week ago)	{"event":{"DateTime":"2026-10-31T17:09:05Z","RemoteAddr":"161.97.103.198:52335","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"509ea4be-d3ac-496f-a6fa-f467d5d3872a","Environ":"","User":"root" ... show more {"event":{"DateTime":"2026-10-31T17:09:05Z","RemoteAddr":"161.97.103.198:52335","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"509ea4be-d3ac-496f-a6fa-f467d5d3872a","Environ":"","User":"root","Password":"qaz@123","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"161.97.103.198","SourcePort":"52335","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-10-31T17:17:20Z","RemoteAddr":"161.97.103.198:52546","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"9bc020e1-f872-407a-8fc0-132196604bf5","Environ":"","User":"root","Password":"789","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interact show less	Hacking Port Scan Brute-Force SSH
🇩🇪 mueslo	2026-11-02 16:07:35 UTC · (1 week ago)	2026-11-02T07:34:15.945037+01:00 hyperion sshd-session[66335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T07:34:17.770032+01:00 hyperion sshd-session[66335]: Failed pas ... show more 2026-11-02T07:34:15.945037+01:00 hyperion sshd-session[66335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T07:34:17.770032+01:00 hyperion sshd-session[66335]: Failed password for root from 161.97.103.198 port 62382 ssh2 2026-11-02T13:27:24.959658+01:00 hyperion sshd-session[103235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T13:27:27.017818+01:00 hyperion sshd-session[103235]: Failed password for root from 161.97.103.198 port 62524 ssh2 2026-11-02T17:07:32.773724+01:00 hyperion sshd-session[125986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T17:07:34.689487+01:00 hyperion sshd-session[125986]: Failed password for root from 161.97.103.198 port 59871 ssh2 show less	Brute-Force SSH
🇫🇷 GoXLd	2026-11-02 15:30:35 UTC · (1 week ago)	2026-11-02T17:30:32.254829+02:00 node1 sshd-session[45870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T17:30:34.420332+02:00 node1 sshd-session[45870]: Failed password ... show more 2026-11-02T17:30:32.254829+02:00 node1 sshd-session[45870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T17:30:34.420332+02:00 node1 sshd-session[45870]: Failed password for root from 161.97.103.198 port 54098 ssh2 ... show less	Brute-Force SSH
🇧🇩 Md Sakibur Rahman	2026-11-02 15:23:24 UTC · (1 week ago)	2026-11-02T21:23:21.369362+06:00 zabbix sshd[133639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T21:23:23.291801+06:00 zabbix sshd[133639]: Failed password for invalid ... show more 2026-11-02T21:23:21.369362+06:00 zabbix sshd[133639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T21:23:23.291801+06:00 zabbix sshd[133639]: Failed password for invalid user root from 161.97.103.198 port 50673 ssh2 ... show less	Brute-Force SSH
🇩🇪 EarlyOwl	2026-11-02 15:16:38 UTC · (1 week ago)	2026-11-02T15:16:38.136402+00:00 mail sshd[299454]: User root from 161.97.103.198 not allowed because not listed in AllowUsers ...	Brute-Force SSH
🇺🇸 MatCat	2026-11-02 15:05:10 UTC · (1 week ago)	Banned by fail2ban: sshd	Brute-Force SSH
Anonymous	2026-11-02 14:14:29 UTC · (1 week ago)	2026-11-02T17:14:26.446193+03:00 2426447-on24665.twc1.net sshd[49269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T17:14:28.368129+03:00 2426447-on24665.twc1.net sshd[49 ... show more 2026-11-02T17:14:26.446193+03:00 2426447-on24665.twc1.net sshd[49269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T17:14:28.368129+03:00 2426447-on24665.twc1.net sshd[49269]: Failed password for root from 161.97.103.198 port 64308 ssh2 ... show less	Brute-Force SSH
🇧🇩 Md Sakibur Rahman	2026-11-02 14:13:10 UTC · (1 week ago)	2026-11-02T20:13:07.331329+06:00 zabbix sshd[128592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T20:13:09.408089+06:00 zabbix sshd[128592]: Failed password for invalid ... show more 2026-11-02T20:13:07.331329+06:00 zabbix sshd[128592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.103.198 user=root 2026-11-02T20:13:09.408089+06:00 zabbix sshd[128592]: Failed password for invalid user root from 161.97.103.198 port 63928 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-02 13:58:21 UTC · (1 week ago)	Repeated failed SSH authentication attempts over TCP triggered a Fail2Ban ban.	Brute-Force SSH
🇧🇾 lns.bz	2026-11-02 13:51:26 UTC · (1 week ago)	SSH bruteforce [BY]	SSH
🇩🇪 jmiarecki	2026-11-02 13:46:48 UTC · (1 week ago)	2026-11-02T13:37:59.126772+00:00 ampere-main sshd[3011890]: Connection closed by authenticating user root 161.97.103.198 port 62904 [preauth] 2026-11-02T13:46:47.321817+00:00 ampere-main sshd[3027157]: Connection closed by authenticating user root 16 ... show more 2026-11-02T13:37:59.126772+00:00 ampere-main sshd[3011890]: Connection closed by authenticating user root 161.97.103.198 port 62904 [preauth] 2026-11-02T13:46:47.321817+00:00 ampere-main sshd[3027157]: Connection closed by authenticating user root 161.97.103.198 port 65129 [preauth] ... show less	Brute-Force SSH
🇨🇦 gab3n	2026-11-02 13:36:44 UTC · (1 week ago)	Repeated unauthorized access attempts observed from this IP address.	Brute-Force SSH

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.153.34.119

🇨🇳 42.176.132.25

🇺🇸 162.216.150.11

🇬🇧 81.19.219.196

🇺🇸 52.90.108.159

🇺🇸 34.75.65.22

🇵🇱 31.22.102.19

🇺🇸 20.65.178.72

🇷🇴 2.57.121.25

🇩🇪 2003:df:b742:ed7:7c86:9411:fd63:559e

🇺🇸 216.25.90.34

🇳🇱 193.47.62.69

🇧🇷 187.63.84.57

🇺🇸 134.122.125.153

🇺🇸 103.4.248.12

🇵🇱 95.214.53.157

🇳🇱 94.102.49.190

🇷🇴 80.94.92.179

🇩🇪 69.5.169.109

🇺🇸 66.132.172.129