JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.138.140

161.97.138.140 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3223042.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.138.140

Whois 161.97.138.140

IP Abuse Reports for 161.97.138.140:

This IP address has been reported a total of 245 times from 55 distinct sources. 161.97.138.140 was first reported on November 27th 2021, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-07-28 20:07:56 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-28 00:07:55 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-27 20:07:55 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 unhfree.net	2025-07-26 20:18:17 (10 months ago)	Jul 26 22:18:16 canopus postfix/smtpd[1176976]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver. ... show more Jul 26 22:18:16 canopus postfix/smtpd[1176976]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi2696149.contaboserver.net> Jul 26 22:18:16 canopus postfix/smtpd[1176976]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi2696149.contaboserver.net> Jul 26 22:18:16 canopus postfix/smtpd[1176976]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi2696149.contaboserver.net> Jul 26 22:18:16 canopus postf ... show less	Brute-Force Exploited Host
🇨🇿 unhfree.net	2025-07-16 15:26:53 (11 months ago)	Jul 16 17:26:52 canopus postfix/smtpd[242809]: 43666DC0AF7: reject: RCPT from vmi2696149.contaboserv ... show more Jul 16 17:26:52 canopus postfix/smtpd[242809]: 43666DC0AF7: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi2696149.contaboserver.net> Jul 16 17:26:52 canopus postfix/smtpd[242809]: 43666DC0AF7: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi2696149.contaboserver.net> Jul 16 17:26:52 canopus postfix/smtpd[242809]: 43666DC0AF7: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vmi26961 ... show less	Brute-Force Exploited Host
Anonymous	2025-07-16 04:32:17 (11 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇺🇸 nowyouknow	2025-07-16 01:57:31 (11 months ago)	(From [email protected]) Hi there, Are you interested in a virtual assistant to help with a ... show more (From [email protected]) Hi there, Are you interested in a virtual assistant to help with administrative work, prospecting, follow-up with leads, along with other responsibilities? If it's a no, go ahead and send me your best insult and we’ll both enjoy a good chuckle out of it, and I’ll leave you alone. show less	Phishing Web Spam
🇨🇿 unhfree.net	2025-07-09 15:23:22 (11 months ago)	Jul 9 17:23:21 canopus postfix/smtpd[3790049]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver. ... show more Jul 9 17:23:21 canopus postfix/smtpd[3790049]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<161.97.138.140> Jul 9 17:23:21 canopus postfix/smtpd[3790049]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<161.97.138.140> Jul 9 17:23:21 canopus postfix/smtpd[3790049]: NOQUEUE: reject: RCPT from vmi2696149.contaboserver.net[161.97.138.140]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<161.97.138.140> Jul 9 17:23:21 can ... show less	Brute-Force Exploited Host
🇷🇺 MrRage	2021-12-10 07:32:17 (4 years ago)	SSH Brute Force Attempt Failed Login From IP Address 161.97.138.140	Brute-Force SSH
Anonymous	2021-12-09 21:41:44 (4 years ago)	Dec 10 02:41:42 scw-6657dc sshd[17673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Dec 10 02:41:42 scw-6657dc sshd[17673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 02:41:42 scw-6657dc sshd[17673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 02:41:44 scw-6657dc sshd[17673]: Failed password for invalid user drcom from 161.97.138.140 port 48364 ssh2 ... show less	Brute-Force SSH
Anonymous	2021-12-09 20:41:33 (4 years ago)	Dec 10 01:41:30 scw-6657dc sshd[16628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Dec 10 01:41:30 scw-6657dc sshd[16628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 01:41:30 scw-6657dc sshd[16628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 01:41:32 scw-6657dc sshd[16628]: Failed password for invalid user butter from 161.97.138.140 port 46196 ssh2 ... show less	Brute-Force SSH
Anonymous	2021-12-09 19:41:25 (4 years ago)	Dec 10 00:41:22 scw-6657dc sshd[15642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Dec 10 00:41:22 scw-6657dc sshd[15642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 00:41:22 scw-6657dc sshd[15642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 10 00:41:23 scw-6657dc sshd[15642]: Failed password for invalid user webdev from 161.97.138.140 port 43376 ssh2 ... show less	Brute-Force SSH
🇳🇱 pikami.org	2021-12-09 18:54:31 (4 years ago)	Dec 9 23:54:09 baguette sshd[3835]: Invalid user pranava from 161.97.138.140 port 34108 Dec 9 23:5 ... show more Dec 9 23:54:09 baguette sshd[3835]: Invalid user pranava from 161.97.138.140 port 34108 Dec 9 23:54:20 baguette sshd[3837]: Invalid user pranava from 161.97.138.140 port 34170 Dec 9 23:54:30 baguette sshd[3839]: Invalid user pranava from 161.97.138.140 port 34278 ... show less	Brute-Force SSH
Anonymous	2021-12-09 18:41:18 (4 years ago)	Dec 9 23:41:15 scw-6657dc sshd[14598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Dec 9 23:41:15 scw-6657dc sshd[14598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 9 23:41:15 scw-6657dc sshd[14598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.140 Dec 9 23:41:17 scw-6657dc sshd[14598]: Failed password for invalid user bdos from 161.97.138.140 port 40292 ssh2 ... show less	Brute-Force SSH
🇫🇷 Lat31320	2021-12-09 18:40:47 (4 years ago)	ddbx2 - SSH brute force	Brute-Force SSH

Showing 1 to 15 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 5.231.70.98

🇺🇸 205.210.31.19

🇬🇭 197.251.193.6

🇲🇿 196.28.226.66

🇺🇸 154.197.57.205

🇸🇬 152.42.240.74

🇫🇷 91.231.89.141

🇳🇱 91.92.40.8

🇨🇦 85.217.149.72

🇳🇱 45.148.10.147

🇺🇸 209.90.232.249

🇧🇪 198.235.24.142

🇺🇸 193.34.74.113

🇫🇷 85.217.140.19

🇷🇴 80.94.92.187

🇨🇳 39.105.205.153

🇺🇸 38.34.175.21

🇮🇪 207.254.71.129

🇨🇳 139.9.191.197

🇰🇷 112.171.55.122