JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.108.236

161.97.108.236 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 77%: ?

77%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	udimagen.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.108.236

Whois 161.97.108.236

IP Abuse Reports for 161.97.108.236:

This IP address has been reported a total of 18 times from 14 distinct sources. 161.97.108.236 was first reported on June 30th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 Bercy	2026-07-01 16:32:05 (2 days ago)	2026-07-01T18:32:02.244214+02:00 gigacity.eu sshd[2459396]: pam_unix(sshd:auth): authentication fail ... show more 2026-07-01T18:32:02.244214+02:00 gigacity.eu sshd[2459396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root 2026-07-01T18:32:03.887243+02:00 gigacity.eu sshd[2459396]: Failed password for root from 161.97.108.236 port 45702 ssh2 2026-07-01T18:32:02.252532+02:00 gigacity.eu sshd[2459394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root 2026-07-01T18:32:03.895430+02:00 gigacity.eu sshd[2459394]: Failed password for root from 161.97.108.236 port 45624 ssh2 ... show less	Brute-Force SSH
🇷🇺 iGor2024	2026-07-01 16:22:51 (2 days ago)	2026-07-01T19:22:50.508404+03:00 singularity2 sshd[3799609]: Connection closed by authenticating use ... show more 2026-07-01T19:22:50.508404+03:00 singularity2 sshd[3799609]: Connection closed by authenticating user root 161.97.108.236 port 37138 [preauth] 2026-07-01T19:22:50.566597+03:00 singularity2 sshd[3799611]: Connection closed by authenticating user root 161.97.108.236 port 37278 [preauth] 2026-07-01T19:22:50.567088+03:00 singularity2 sshd[3799610]: Connection closed by authenticating user root 161.97.108.236 port 37086 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-07-01 15:19:36 (2 days ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 DocNetzwerk	2026-07-01 13:23:19 (2 days ago)	161.97.108.236 (FR/France/udimagen.net), 4 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇳🇱 wlt-blocker	2026-07-01 07:56:39 (3 days ago)	Illegal port scans	Port Scan
🇨🇦 d-eath.ca	2026-07-01 07:36:59 (3 days ago)	2026-07-01T03:36:58.318085-04:00 oinkvps sshd[404589]: Failed password for root from 161.97.108.236 ... show more 2026-07-01T03:36:58.318085-04:00 oinkvps sshd[404589]: Failed password for root from 161.97.108.236 port 36920 ssh2 2026-07-01T03:36:56.984868-04:00 oinkvps sshd[404587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root 2026-07-01T03:36:58.497301-04:00 oinkvps sshd[404587]: Failed password for root from 161.97.108.236 port 36898 ssh2 2026-07-01T03:36:57.190917-04:00 oinkvps sshd[404591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root 2026-07-01T03:36:58.635090-04:00 oinkvps sshd[404591]: Failed password for root from 161.97.108.236 port 36934 ssh2 ... show less	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-07-01 05:42:46 (3 days ago)	Jul 1 08:42:45 www9 sshd[346312]: Failed password for root from 161.97.108.236 port 45206 ssh2 Jul ... show more Jul 1 08:42:45 www9 sshd[346312]: Failed password for root from 161.97.108.236 port 45206 ssh2 Jul 1 08:42:44 www9 sshd[346314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root Jul 1 08:42:45 www9 sshd[346314]: Failed password for root from 161.97.108.236 port 45208 ssh2 ... show less	Brute-Force SSH
🇫🇮 MostHosted	2026-07-01 05:02:05 (3 days ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-01 04:50:40 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 bittiguru.fi	2026-07-01 03:51:26 (3 days ago)	Jul 1 06:51:25 www6 sshd[2495837]: Failed password for root from 161.97.108.236 port 40854 ssh2 Jul ... show more Jul 1 06:51:25 www6 sshd[2495837]: Failed password for root from 161.97.108.236 port 40854 ssh2 Jul 1 06:51:24 www6 sshd[2495838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 user=root Jul 1 06:51:25 www6 sshd[2495838]: Failed password for root from 161.97.108.236 port 40846 ssh2 ... show less	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-06-30 22:30:35 (3 days ago)	Jul 1 01:30:34 www6 sshd[2460776]: Invalid user cpanel from 161.97.108.236 port 58264 Jul 1 01:30: ... show more Jul 1 01:30:34 www6 sshd[2460776]: Invalid user cpanel from 161.97.108.236 port 58264 Jul 1 01:30:35 www6 sshd[2460783]: Invalid user cisco from 161.97.108.236 port 58342 Jul 1 01:30:35 www6 sshd[2460788]: Invalid user admin from 161.97.108.236 port 58362 ... show less	Brute-Force SSH
🇩🇪 formality	2026-06-30 19:50:58 (3 days ago)	Invalid user enable from 161.97.108.236 port 57208	Brute-Force SSH
🇧🇾 lns.bz	2026-06-30 19:49:58 (3 days ago)	SSH bruteforce [BY]	SSH
🇩🇪 NetWatch	2026-06-30 19:43:42 (3 days ago)	The IP 161.97.108.236 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇮 bittiguru.fi	2026-06-30 19:33:12 (3 days ago)	Jun 30 22:33:09 sauna sshd[61272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jun 30 22:33:09 sauna sshd[61272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.108.236 Jun 30 22:33:11 sauna sshd[61272]: Failed password for invalid user admin from 161.97.108.236 port 45622 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.11

🇨🇷 143.202.162.132

🇩🇪 141.11.32.54

🇷🇺 83.237.162.110

🇳🇱 45.148.10.151

🇭🇰 35.241.80.252

🇻🇳 171.231.193.246

🇬🇧 154.16.44.51

🇨🇳 117.150.172.75

🇱🇹 85.206.68.80

🇱🇺 64.89.161.90

🇱🇺 64.89.161.83

🇨🇳 60.166.8.174

🇺🇸 57.141.0.34

🇳🇱 45.154.98.101

🇦🇿 37.61.122.57

🇯🇵 8.216.90.251

🇻🇳 171.250.162.230

🇨🇳 171.111.196.251

🇻🇳 123.22.147.170