JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.107.114

161.97.107.114

Neutral Activity

198 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

vmi2563891.contaboserver.net

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

161.97.107.114 has been reported 198 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 161.97.107.114:

This IP address has been reported a total of 198 times from 89 distinct sources. 161.97.107.114 was first reported on September 25th 2025, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-01-24 02:49:29 (7 months ago)	Fail2ban within 2026-01-05 20:30:25 - 2026-01-05 22:55:56 CET(+0100) banned: 9 times by fail2ban<MDA ... show more Fail2ban within 2026-01-05 20:30:25 - 2026-01-05 22:55:56 CET(+0100) banned: 9 times by fail2ban<MDA>; 9 times by fail2ban[recidive] show less	Email Spam Brute-Force
🇩🇪 initsol	2026-01-06 09:55:49 (8 months ago)	Jan 6 10:25:26 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show more Jan 6 10:25:26 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<VeqAwbRHXNyhYWty> Jan 6 10:25:38 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<x1g3wrRHwL+hYWty> Jan 6 10:55:48 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<1TUiLrVHhtahYWty> ... show less	Brute-Force
🇫🇷 soheil.kh	2026-01-06 09:07:08 (8 months ago)	Rule : POP 01/06/26 12:36:47 POPS 1856 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 01/06/26 12:36:47 POPS 1856 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 01/06/26 12:36:47 POPS 1856 161.97.107.114 USER USER [email protected] OK 5 27 01/06/26 12:36:47 POPS 1856 161.97.107.114 PASS PASS * -ERR Unable to log on 23 22 show less	Port Scan Spoofing
🇩🇪 initsol	2026-01-06 05:16:44 (8 months ago)	Jan 6 05:47:11 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show more Jan 6 05:47:11 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<twti3rBHjpWhYWty> Jan 6 05:47:22 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<hmUR37BHdo2hYWty> Jan 6 06:16:44 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<IUcTSLFHELChYWty> ... show less	Brute-Force
🇫🇷 soheil.kh	2026-01-06 05:00:06 (8 months ago)	Rule : POP 01/06/26 08:28:47 POPS 1568 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 01/06/26 08:28:47 POPS 1568 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 01/06/26 08:28:47 POPS 1568 161.97.107.114 USER USER [email protected] OK 5 28 01/06/26 08:28:47 POPS 1568 161.97.107.114 PASS PASS * -ERR Unable to log on 23 13 show less	Port Scan Spoofing
🇩🇪 Mr-Money	2026-01-06 03:03:42 (8 months ago)	scenario: crowdsecurity/dovecot-spam - events: 4	Brute-Force Web App Attack
🇳🇱 Godert Jan van Manen	2026-01-06 02:51:28 (8 months ago)	Jan 6 03:46:10 odin dovecot: auth-worker(32192): sql([email protected],161.97.107.114,<LIKZLa9HmrChYW ... show more Jan 6 03:46:10 odin dovecot: auth-worker(32192): sql([email protected],161.97.107.114,<LIKZLa9HmrChYWty>): unknown user Jan 6 03:46:12 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=161.97.107.114, lip=178.162.131.122, session=<LIKZLa9HmrChYWty> Jan 6 03:47:27 odin dovecot: auth-worker(32192): sql([email protected],161.97.107.114,<8YY0Mq9HjtmhYWty>): unknown user Jan 6 03:47:29 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=161.97.107.114, lip=178.162.131.122, session=<8YY0Mq9HjtmhYWty> Jan 6 03:51:27 odin dovecot: auth-worker(32192): sql([email protected],161.97.107.114,<E+SBQK9HepKhYWty>): unknown user show less	Brute-Force
Anonymous	2026-01-06 02:33:09 (8 months ago)	Automated abuse report by SpeedIT Security Team	Brute-Force Exploited Host SSH
🇫🇷 ✨	2026-01-06 02:19:28 (8 months ago)	Rule : POP 01/06/26 02:16:07 POPS 1484 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 01/06/26 02:16:07 POPS 1484 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 01/06/26 02:16:07 POPS 1484 161.97.107.114 USER USER [email protected] OK 5 27 01/06/26 02:16:07 POPS 1484 161.97.107.114 PASS PASS * -ERR Unable to log on 23 15 show less	Port Scan Spoofing
🇬🇧 Mendip_Defender	2026-01-06 02:16:31 (8 months ago)	Jan 6 02:05:29 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 a ... show more Jan 6 02:05:29 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=161.97.107.114, lip=188.246.206.60, session=<UMIGnK5H0qOhYWty> Jan 6 02:16:16 jackstringer dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=161.97.107.114, lip=188.246.206.60, session=<srWNwq5HJryhYWty> ... show less	Brute-Force
🇫🇷 bongcloud.de	2026-01-06 02:16:22 (8 months ago)	Jan 6 03:05:35 web dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<not ... show more Jan 6 03:05:35 web dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=62.171.133.42, session=<MbB7nK5HwtShYWty> Jan 6 03:16:22 web dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=62.171.133.42, session=<geIIw65HyNuhYWty> ... show less	Brute-Force SSH
🇫🇷 ✨	2026-01-06 00:54:19 (8 months ago)	Rule : POP 01/06/26 01:24:01 POPS 1112 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 01/06/26 01:24:01 POPS 1112 161.97.107.114 OK Welcome to MailEnable POP3 Server 39 0 01/06/26 01:24:01 POPS 1112 161.97.107.114 USER USER [email protected] OK 5 41 01/06/26 01:24:01 POPS 1112 161.97.107.114 PASS PASS * -ERR Unable to log on 23 30 show less	Port Scan Spoofing
🇩🇪 initsol	2026-01-06 00:40:22 (8 months ago)	Jan 6 00:54:18 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show more Jan 6 00:54:18 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<mVb6xqxH5t6hYWty> Jan 6 01:19:32 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<S0c3Ia1H4L2hYWty> Jan 6 01:40:21 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=161.97.107.114, lip=10.10.50.34, session=<zLOna61H8sGhYWty> ... show less	Brute-Force
🇩🇪 phil2k	2026-01-05 21:55:58 (8 months ago)	fail2ban:recidive:2026-01-05 20:58:58,713 fail2ban.actions [50620]: NOTICE [ANONYMIZED_RUNNI ... show more fail2ban:recidive:2026-01-05 20:58:58,713 fail2ban.actions [50620]: NOTICE [ANONYMIZED_RUNNING_PROCESS] Ban 161.97.107.114 2026-01-05 22:55:56,189 fail2ban.actions [50620]: NOTICE [ANONYMIZED_RUNNING_PROCESS] Ban 161.97.107.114 show less	DDoS Attack Port Scan Brute-Force
🇩🇪 xortex	2026-01-05 21:42:21 (8 months ago)	brute forces mailboxes	Brute-Force

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.1.136.171

🇧🇪 207.175.220.59

🇮🇩 202.148.31.43

🇧🇴 200.58.166.42

🇺🇸 195.184.76.114

🇨🇦 174.113.214.90

🇺🇸 167.71.250.8

🇪🇬 156.216.131.61

🇺🇸 138.36.92.120

🇷🇺 94.181.46.216

🇷🇴 92.118.39.49

🇫🇷 91.231.89.231

🇩🇪 82.23.86.39

🇺🇸 66.132.172.142

🇺🇸 64.95.14.221

🇨🇳 61.155.106.101

🇹🇼 35.194.218.165

🇺🇸 34.145.40.13

🇧🇷 16.5.0.238

🇺🇸 184.105.247.224