This IP address has been reported a total of
407
times from
234 distinct
sources.
161.97.131.189 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2025-11-23T07:13:59.214137+00:00 vm-wordpress sshd[1289738]: Invalid user pawel from 161.97.131.189 ...
show more2025-11-23T07:13:59.214137+00:00 vm-wordpress sshd[1289738]: Invalid user pawel from 161.97.131.189 port 58948
2025-11-23T07:15:24.065372+00:00 vm-wordpress sshd[1289783]: Invalid user testuser from 161.97.131.189 port 55174
2025-11-23T07:16:47.594319+00:00 vm-wordpress sshd[1289807]: Invalid user deposito from 161.97.131.189 port 53872
2025-11-23T07:22:18.067039+00:00 vm-wordpress sshd[1289921]: Invalid user kevin from 161.97.131.189 port 60002
2025-11-23T07:23:41.217872+00:00 vm-wordpress sshd[1289947]: Invalid user carlos from 161.97.131.189 port 47662
...
show less
2025-11-23T02:10:14.747086 MikuHK sshd[1814096]: pam_unix(sshd:auth): authentication failure; lognam ...
show more2025-11-23T02:10:14.747086 MikuHK sshd[1814096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.131.189
2025-11-23T02:10:17.192882 MikuHK sshd[1814096]: Failed password for invalid user sajjad from 161.97.131.189 port 50350 ssh2
...
show less
Brute-Force
SSH
Anonymous
2025-11-23T09:01:02.028204+02:00 mailserver sshd-session[545683]: Disconnected from authenticating u ...
show more2025-11-23T09:01:02.028204+02:00 mailserver sshd-session[545683]: Disconnected from authenticating user root 161.97.131.189 port 47262 [preauth]
2025-11-23T09:04:42.699129+02:00 mailserver sshd-session[547000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.131.189 user=root
2025-11-23T09:04:44.302164+02:00 mailserver sshd-session[547000]: Failed password for root from 161.97.131.189 port 57622 ssh2
2025-11-23T09:04:44.652668+02:00 mailserver sshd-session[547000]: Disconnected from authenticating user root 161.97.131.189 port 57622 [preauth]
...
show less
161.97.131.189 (GB/United Kingdom/vmi2724870.contaboserver.net), 5 distributed sshd attacks on accou ...
show more161.97.131.189 (GB/United Kingdom/vmi2724870.contaboserver.net), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 23 00:05:06 14995 sshd[17544]: Invalid user ubuntu from 161.97.131.189 port 35974
Nov 23 00:02:03 14995 sshd[17188]: Invalid user ubuntu from 101.47.143.192 port 45420
Nov 23 00:02:05 14995 sshd[17188]: Failed password for invalid user ubuntu from 101.47.143.192 port 45420 ssh2
Nov 23 00:03:28 14995 sshd[17387]: Invalid user ubuntu from 45.78.216.9 port 47040
Nov 23 00:03:30 14995 sshd[17387]: Failed password for invalid user ubuntu from 45.78.216.9 port 47040 ssh2
IP Addresses Blocked:
show less
Nov 23 06:32:50 MinerPL sshd[384024]: Invalid user user01 from 161.97.131.189 port 50622
Nov 23 06:3 ...
show moreNov 23 06:32:50 MinerPL sshd[384024]: Invalid user user01 from 161.97.131.189 port 50622
Nov 23 06:34:15 MinerPL sshd[419611]: Invalid user ahmad from 161.97.131.189 port 47388
Nov 23 06:37:07 MinerPL sshd[491329]: Invalid user cps from 161.97.131.189 port 50320
Nov 23 06:39:57 MinerPL sshd[562807]: Invalid user samba from 161.97.131.189 port 43514
Nov 23 06:42:46 MinerPL sshd[633333]: Invalid user mcserver from 161.97.131.189 port 45434
show less
2025-11-23T05:26:20.753262+00:00 instance-amd sshd[1476991]: Invalid user support from 161.97.131.18 ...
show more2025-11-23T05:26:20.753262+00:00 instance-amd sshd[1476991]: Invalid user support from 161.97.131.189 port 57122
2025-11-23T05:29:11.700918+00:00 instance-amd sshd[1477021]: Invalid user prtg from 161.97.131.189 port 58960
2025-11-23T05:32:03.606983+00:00 instance-amd sshd[1477078]: Invalid user user01 from 161.97.131.189 port 46634
2025-11-23T05:33:27.564317+00:00 instance-amd sshd[1477082]: Invalid user ahmad from 161.97.131.189 port 36420
2025-11-23T05:36:21.841304+00:00 instance-amd sshd[1477133]: Invalid user cps from 161.97.131.189 port 46350
...
show less
{"event":{"DateTime":"2025-11-23T05:03:33Z","RemoteAddr":"161.97.131.189:45972","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2025-11-23T05:03:33Z","RemoteAddr":"161.97.131.189:45972","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"cec74647-1f6f-4ac2-9787-8cc1b758305d","Environ":"","User":"admin","Password":"1234!@#$","Client":"SSH-2.0-libssh_0.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"161.97.131.189","SourcePort":"45972","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2025-11-23T05:07:23Z","RemoteAddr":"161.97.131.189:49728","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"83ee8f11-5a38-4557-8673-84484fe46529","Environ":"","User":"dev02","Password":"dev02","Client":"SSH-2.0-libssh_0.11.1","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"",
show less
Nov 23 06:06:35 MinerPL sshd[3919181]: Invalid user admin from 161.97.131.189 port 42080
Nov 23 06:0 ...
show moreNov 23 06:06:35 MinerPL sshd[3919181]: Invalid user admin from 161.97.131.189 port 42080
Nov 23 06:08:20 MinerPL sshd[3964811]: Invalid user dev02 from 161.97.131.189 port 42366
Nov 23 06:09:45 MinerPL sshd[3999031]: Invalid user wolli from 161.97.131.189 port 33644
Nov 23 06:12:37 MinerPL sshd[4070748]: Invalid user sr from 161.97.131.189 port 42586
Nov 23 06:15:30 MinerPL sshd[4145195]: Invalid user admin from 161.97.131.189 port 47746
show less
2025-11-23T05:03:53.491699+00:00 instance-amd sshd[1476654]: Invalid user admin from 161.97.131.189 ...
show more2025-11-23T05:03:53.491699+00:00 instance-amd sshd[1476654]: Invalid user admin from 161.97.131.189 port 46654
2025-11-23T05:07:28.195185+00:00 instance-amd sshd[1476700]: Invalid user dev02 from 161.97.131.189 port 54478
2025-11-23T05:08:56.580709+00:00 instance-amd sshd[1476708]: Invalid user wolli from 161.97.131.189 port 50390
2025-11-23T05:11:49.596823+00:00 instance-amd sshd[1476762]: Invalid user sr from 161.97.131.189 port 57094
2025-11-23T05:14:41.877192+00:00 instance-amd sshd[1476788]: Invalid user admin from 161.97.131.189 port 45162
...
show less
(sshd) Failed SSH login from 161.97.131.189 (GB/United Kingdom/vmi2724870.contaboserver.net): 5 in t ...
show more(sshd) Failed SSH login from 161.97.131.189 (GB/United Kingdom/vmi2724870.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 23 05:06:23 22054 sshd[30316]: Invalid user admin from 161.97.131.189 port 51168
Nov 23 05:06:26 22054 sshd[30316]: Failed password for invalid user admin from 161.97.131.189 port 51168 ssh2
Nov 23 05:08:12 22054 sshd[30561]: Invalid user dev02 from 161.97.131.189 port 40278
Nov 23 05:08:15 22054 sshd[30561]: Failed password for invalid user dev02 from 161.97.131.189 port 40278 ssh2
Nov 23 05:09:40 22054 sshd[30772]: Invalid user wolli from 161.97.131.189 port 59668
show less
Nov 23 05:03:24 ubuntu sshd[434931]: Failed password for invalid user admin from 161.97.131.189 port ...
show moreNov 23 05:03:24 ubuntu sshd[434931]: Failed password for invalid user admin from 161.97.131.189 port 42790 ssh2
Nov 23 05:03:26 ubuntu sshd[434931]: Disconnected from invalid user admin 161.97.131.189 port 42790 [preauth]
Nov 23 05:07:16 ubuntu sshd[434947]: Invalid user dev02 from 161.97.131.189 port 50522
Nov 23 05:07:16 ubuntu sshd[434947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.131.189
Nov 23 05:07:17 ubuntu sshd[434947]: Failed password for invalid user dev02 from 161.97.131.189 port 50522 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 407 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩