JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.119.8

161.97.119.8 was found in our database!

This IP was reported 339 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3342159.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.119.8

Whois 161.97.119.8

IP Abuse Reports for 161.97.119.8:

This IP address has been reported a total of 339 times from 207 distinct sources. 161.97.119.8 was first reported on May 12th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 helix	2026-05-26 12:09:47 (2 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇮🇳 evicky2002	2026-05-20 04:30:47 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-19 14:20:29 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇦🇹 urnilxfgbez	2026-05-14 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇳 ThreatBook.io	2026-05-14 22:36:36 (1 month ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/161.97.119.8	SSH
🇺🇸 bigscoots.com	2026-05-14 08:48:52 (1 month ago)	161.97.119.8 (DE/-/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [walrus] in ... show more 161.97.119.8 (DE/-/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [walrus] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 03:48:26 15171 sshd[13416]: Invalid user walrus from 139.59.41.158 port 39566 May 14 03:37:10 15171 sshd[11838]: Invalid user walrus from 161.97.119.8 port 49838 May 14 03:37:12 15171 sshd[11838]: Failed password for invalid user walrus from 161.97.119.8 port 49838 ssh2 May 14 03:47:52 15171 sshd[13310]: Invalid user walrus from 161.35.141.232 port 38742 May 14 03:47:54 15171 sshd[13310]: Failed password for invalid user walrus from 161.35.141.232 port 38742 ssh2 IP Addresses Blocked: 139.59.41.158 (IN/-/-) show less	Brute-Force SSH
Anonymous	2026-05-14 07:38:13 (1 month ago)	sshd: Invalid user level from 161.97.119.8 port 47142 sshd: Invalid user level from 161.97.119.8 por ... show more sshd: Invalid user level from 161.97.119.8 port 47142 sshd: Invalid user level from 161.97.119.8 port 33406 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 07:36:53 (1 month ago)	(sshd) Failed SSH login from 161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net): 5 in the last 3 ... show more (sshd) Failed SSH login from 161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 14 06:42:44 23452 sshd[10156]: Invalid user postgres from 161.97.119.8 port 46294 May 14 06:42:47 23452 sshd[10156]: Failed password for invalid user postgres from 161.97.119.8 port 46294 ssh2 May 14 06:46:15 23452 sshd[10567]: Invalid user bitcoin from 161.97.119.8 port 48368 May 14 06:46:18 23452 sshd[10567]: Failed password for invalid user bitcoin from 161.97.119.8 port 48368 ssh2 May 14 07:36:32 23452 sshd[15672]: Invalid user bigscoots from 161.97.119.8 port 58494 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 07:08:47 (1 month ago)	(sshd) Failed SSH login from 161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net): 5 in the last 3 ... show more (sshd) Failed SSH login from 161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 14 01:35:11 13577 sshd[32379]: Invalid user miner from 161.97.119.8 port 52304 May 14 01:35:13 13577 sshd[32379]: Failed password for invalid user miner from 161.97.119.8 port 52304 ssh2 May 14 01:50:39 13577 sshd[1624]: Invalid user bitcoind from 161.97.119.8 port 53060 May 14 01:50:41 13577 sshd[1624]: Failed password for invalid user bitcoind from 161.97.119.8 port 53060 ssh2 May 14 02:08:32 13577 sshd[3435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.119.8 user=root show less	Brute-Force SSH
🇫🇷 tecnicorioja	2026-05-14 06:00:24 (1 month ago)	Failed password for root May 14 05:00:34 port 51998	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 05:35:07 (1 month ago)	161.97.119.8 (DE/-/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [root] in th ... show more 161.97.119.8 (DE/-/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 00:32:52 14260 sshd[22683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.141.232 user=root May 14 00:32:54 14260 sshd[22683]: Failed password for root from 161.35.141.232 port 57326 ssh2 May 14 00:34:24 14260 sshd[22836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.119.8 user=root May 14 00:34:26 14260 sshd[22836]: Failed password for root from 161.97.119.8 port 36124 ssh2 May 14 00:34:54 14260 sshd[22840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.22.211.47 user=root IP Addresses Blocked: 161.35.141.232 (US/-/-) show less	Brute-Force SSH
🇭🇺 Markspooky	2026-05-14 05:19:32 (1 month ago)	2026-05-14T06:57:56.432497+02:00 markspooky sshd-session[304931]: pam_unix(sshd:auth): authenticatio ... show more 2026-05-14T06:57:56.432497+02:00 markspooky sshd-session[304931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.119.8 2026-05-14T06:57:58.603719+02:00 markspooky sshd-session[304931]: Failed password for invalid user token from 161.97.119.8 port 47468 ssh2 2026-05-14T07:19:31.255844+02:00 markspooky sshd-session[305170]: User postgres from 161.97.119.8 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇸🇬 kipfel★	2026-05-14 05:18:18 (1 month ago)	2026-05-14T13:07:06.777109+08:00 instance-20240519-1435 sshd[1042063]: Invalid user debian from 161. ... show more 2026-05-14T13:07:06.777109+08:00 instance-20240519-1435 sshd[1042063]: Invalid user debian from 161.97.119.8 port 43706 2026-05-14T13:12:11.271064+08:00 instance-20240519-1435 sshd[1045668]: Invalid user wallet from 161.97.119.8 port 41538 2026-05-14T13:18:17.758000+08:00 instance-20240519-1435 sshd[1050141]: Invalid user seed from 161.97.119.8 port 53910 ... show less	Brute-Force SSH
🇬🇧 blik2108	2026-05-14 05:18:15 (1 month ago)	May 14 05:19:35 vm20 sshd[3926659]: Invalid user btc from 161.97.119.8 port 46850 May 14 06:18:14 vm ... show more May 14 05:19:35 vm20 sshd[3926659]: Invalid user btc from 161.97.119.8 port 46850 May 14 06:18:14 vm20 sshd[3927568]: Invalid user walrus from 161.97.119.8 port 34892 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-14 05:15:26 (1 month ago)	161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [root] ... show more 161.97.119.8 (DE/Germany/vmi2606885.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 14 00:14:19 14202 sshd[17871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.21.168.105 user=root May 14 00:14:21 14202 sshd[17871]: Failed password for root from 88.21.168.105 port 38718 ssh2 May 14 00:14:49 14202 sshd[17884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.119.8 user=root May 14 00:14:51 14202 sshd[17884]: Failed password for root from 161.97.119.8 port 36542 ssh2 May 14 00:15:19 14202 sshd[17975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.102.185.109 user=root IP Addresses Blocked: 88.21.168.105 (ES/Spain/105.red-88-21-168.staticip.rima-tde.net) show less	Brute-Force SSH

Showing 1 to 15 of 339 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.100

🇮🇳 159.65.156.145

🇺🇸 20.98.140.180

🇰🇷 220.71.199.64

🇮🇩 203.83.45.113

🇫🇷 185.177.72.67

🇸🇬 168.138.177.40

🇳🇱 160.119.69.14

🇹🇭 118.194.251.144

🇺🇸 66.132.172.43

🇨🇳 39.105.133.77

🇺🇸 216.73.161.220

🇮🇳 122.183.57.114

🇨🇳 115.231.78.11

🇫🇷 91.196.152.29

🇬🇧 89.37.172.136

🇺🇸 20.80.105.86

🇰🇷 222.232.176.7

🇨🇳 221.228.10.226

🇧🇷 187.8.3.230