JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.118.225

161.97.118.225 was found in our database!

This IP was reported 171 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2851893.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.118.225

Whois 161.97.118.225

IP Abuse Reports for 161.97.118.225:

This IP address has been reported a total of 171 times from 113 distinct sources. 161.97.118.225 was first reported on June 8th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-12 22:54:53 (2 weeks ago)	161.97.118.225 (DE/Germany/vmi2851893.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 161.97.118.225 (DE/Germany/vmi2851893.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 12 17:54:39 14238 sshd[11633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.232.196 user=root Jun 12 17:46:09 14238 sshd[6697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.4.92 user=root Jun 12 17:46:11 14238 sshd[6697]: Failed password for root from 165.154.4.92 port 34190 ssh2 Jun 12 17:47:40 14238 sshd[7471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.118.225 user=root Jun 12 17:47:43 14238 sshd[7471]: Failed password for root from 161.97.118.225 port 50984 ssh2 IP Addresses Blocked: 161.35.232.196 (US/United States/ubuntu-s-2vcpu-siforon.com) 165.154.4.92 (HK/Hong Kong/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-12 21:49:04 (2 weeks ago)	161.97.118.225 (DE/Germany/vmi2851893.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 161.97.118.225 (DE/Germany/vmi2851893.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 12 16:18:41 15084 sshd[24675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.111.155 user=root Jun 12 16:18:43 15084 sshd[24675]: Failed password for root from 101.36.111.155 port 54772 ssh2 Jun 12 16:48:15 15084 sshd[8490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.118.225 user=root Jun 12 16:48:17 15084 sshd[8490]: Failed password for root from 161.97.118.225 port 56490 ssh2 Jun 12 16:48:47 15084 sshd[8665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.230.5 user=root IP Addresses Blocked: 101.36.111.155 (HK/Hong Kong/-) show less	Brute-Force SSH
🇺🇸 wristhulk	2026-06-12 21:39:35 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran24!!'.	SSH Brute-Force
🇨🇭 ale	2026-06-12 20:45:13 (2 weeks ago)	SSH auth scanning - multiple failed logins	Brute-Force SSH
🇨🇭 Boxis.net NOC	2026-06-12 20:26:58 (2 weeks ago)	(sshd) Failed SSH login from 161.97.118.225 (US/United States/vmi2851893.contaboserver.net): 5 in th ... show more (sshd) Failed SSH login from 161.97.118.225 (US/United States/vmi2851893.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 12 22:03:01 da057 sshd[2042015]: Invalid user trader from 161.97.118.225 port 33214 Jun 12 22:05:01 da057 sshd[2043571]: Invalid user web3 from 161.97.118.225 port 46526 Jun 12 22:16:16 da057 sshd[2060453]: Invalid user wallet from 161.97.118.225 port 52614 Jun 12 22:20:54 da057 sshd[2066970]: Invalid user tomcat from 161.97.118.225 port 52944 Jun 12 22:26:46 da057 sshd[2073166]: Invalid user postgres from 161.97.118.225 port 39906 show less	Port Scan
🇭🇺 szasa	2026-06-12 20:24:09 (2 weeks ago)	Jun 12 22:24:06 webhosting01 sshd[333979]: Invalid user ethereum from 161.97.118.225 port 36534 Jun ... show more Jun 12 22:24:06 webhosting01 sshd[333979]: Invalid user ethereum from 161.97.118.225 port 36534 Jun 12 22:24:06 webhosting01 sshd[333979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.118.225 Jun 12 22:24:06 webhosting01 sshd[333979]: Invalid user ethereum from 161.97.118.225 port 36534 Jun 12 22:24:09 webhosting01 sshd[333979]: Failed password for invalid user ethereum from 161.97.118.225 port 36534 ssh2 ... show less	Brute-Force SSH
🇨🇭 TOCE	2026-06-12 19:43:25 (2 weeks ago)	12 hits seen on 2026-06-12, ports 22 (SSH) on a honeypot from www.toce.ch	SSH
🇺🇸 wristhulk	2026-06-12 19:35:54 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran911@#' ... show more Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran911@#'. show less	SSH Brute-Force
🇺🇸 kosada.com	2026-06-12 19:20:57 (2 weeks ago)	SSH password guessing: Invalid user deploy from 161.97.118.225 port 52342	Brute-Force SSH
🇺🇸 wristhulk	2026-06-12 19:09:47 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran007!'.	SSH Brute-Force
🇩🇪 LRob.fr	2026-06-12 18:15:06 (2 weeks ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇨🇿 plzenskypruvodce.cz	2026-06-12 18:04:49 (2 weeks ago)	2026-06-12T19:58:18.792028+02:00 eproxy sshd[2024887]: Invalid user tomcat from 161.97.118.225 port ... show more 2026-06-12T19:58:18.792028+02:00 eproxy sshd[2024887]: Invalid user tomcat from 161.97.118.225 port 56492 2026-06-12T20:04:49.399032+02:00 eproxy sshd[2025102]: Invalid user deploy from 161.97.118.225 port 56442 ... show less	Web App Attack
🇺🇸 wristhulk	2026-06-12 17:59:36 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2020#' ... show more Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran2020#'. show less	SSH Brute-Force
🇺🇸 wristhulk	2026-06-12 17:29:03 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'markmoran@'.	SSH Brute-Force
🇺🇸 wristhulk	2026-06-12 17:13:15 (2 weeks ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'root' Password: 'BuenosAires'.	SSH Brute-Force

Showing 1 to 15 of 171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.251.103

🇮🇳 122.179.139.166

🇩🇪 109.41.112.0

🇳🇱 91.92.40.124

🇺🇸 67.145.166.159

🇳🇱 46.8.68.144

🇸🇬 43.173.180.149

🇺🇸 216.73.160.212

🇧🇷 200.223.232.26

🇺🇸 162.216.150.150

🇩🇪 139.59.208.49

🇺🇸 91.230.168.222

🇹🇷 89.252.157.42

🇵🇹 77.54.180.12

🇳🇱 45.148.10.147

🇨🇳 36.212.31.122

🇩🇪 213.209.159.227

🇺🇸 198.199.106.159

🇩🇪 194.187.176.155

🇩🇪 194.187.176.150