This IP address has been reported a total of
47
times from
41 distinct
sources.
161.97.112.221 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 6
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports.
The most common categories in these recent reports were:
SSH
35
times;
Brute-Force
31
times;
Port Scan
8
times;
Hacking
4
times;
Bad Web Bot
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 26 11:22:20 khomus sshd-session[30248]: Connection closed by authenticating user root 161.97.112 ...
show moreOct 26 11:22:20 khomus sshd-session[30248]: Connection closed by authenticating user root 161.97.112.221 port 60276 [preauth]
Oct 26 11:22:20 khomus sshd-session[30250]: Connection closed by authenticating user root 161.97.112.221 port 60282 [preauth]
Oct 26 11:22:21 khomus sshd-session[30252]: Connection closed by authenticating user root 161.97.112.221 port 60286 [preauth]
Oct 26 11:22:23 khomus sshd-session[30254]: Connection closed by authenticating user root 161.97.112.221 port 60290 [preauth]
Oct 26 11:22:23 khomus sshd-session[30256]: Connection closed by authenticating user root 161.97.112.221 port 59186 [preauth]
...
show less
2026-10-25T16:38:21.032228+00:00 sshd[73356]: Failed password for root from 161.97.112.221 port 521 ...
show more2026-10-25T16:38:21.032228+00:00 sshd[73356]: Failed password for root from 161.97.112.221 port 52140 ssh2
...
show less
Brute-Force
SSH
Anonymous
Oct 25 15:29:59 vmi3075181 sshd[3122487]: pam_unix(sshd:auth): authentication failure; logname= uid= ...
show moreOct 25 15:29:59 vmi3075181 sshd[3122487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.112.221 user=root
Oct 25 15:30:01 vmi3075181 sshd[3122487]: Failed password for root from 161.97.112.221 port 58776 ssh2
...
show less
(sshd) Failed SSH login from 161.97.112.221 (FR/France/vmi3199973.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 161.97.112.221 (FR/France/vmi3199973.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 25 23:48:22 ded01 sshd[18607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.112.221 user=root
Oct 25 23:48:24 ded01 sshd[18607]: Failed password for root from 161.97.112.221 port 47010 ssh2
Oct 25 23:48:26 ded01 sshd[18642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.112.221 user=root
Oct 25 23:48:28 ded01 sshd[18642]: Failed password for root from 161.97.112.221 port 33244 ssh2
Oct 25 23:48:31 ded01 sshd[18685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.112.221 user=root
show less
Cluster member (Omitted) (US/United States/-) said, DENY 161.97.112.221, Reason:[(sshd) Failed SSH l ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 161.97.112.221, Reason:[(sshd) Failed SSH login from 161.97.112.221 (GB/United Kingdom/vmi3199973.contaboserver.net): 3 in the last 3600 secs]
show less
This IP address carried out 8 port scanning attempts on 22-10-2026. For more information or to repor ...
show moreThis IP address carried out 8 port scanning attempts on 22-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 2 SSH credential attack (attempts) on 22-10-2026. For more information o ...
show moreThis IP address carried out 2 SSH credential attack (attempts) on 22-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
