Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
2026-11-05T10:55:17.449993-07:00 felix sshd[58942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84 user=root
2026-11-05T10:55:19.152264-07:00 felix sshd[58942]: Failed password for invalid user ...
show more2026-11-05T10:55:17.449993-07:00 felix sshd[58942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84 user=root
2026-11-05T10:55:19.152264-07:00 felix sshd[58942]: Failed password for invalid user root from 161.97.138.84 port 57354 ssh2
2026-11-05T11:22:41.258371-07:00 felix sshd[61029]: Invalid user mapadmin from 161.97.138.84 port 53164
...
show less
2026-11-05T18:22:23.373080a552666061.local sshd[250553]: Invalid user mapadmin from 161.97.138.84 port 43076
2026-11-05T18:22:23.385183a552666061.local sshd[250553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ...
show more2026-11-05T18:22:23.373080a552666061.local sshd[250553]: Invalid user mapadmin from 161.97.138.84 port 43076
2026-11-05T18:22:23.385183a552666061.local sshd[250553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84
2026-11-05T18:22:24.976957a552666061.local sshd[250553]: Failed password for invalid user mapadmin from 161.97.138.84 port 43076 ssh2
...
show less
2026-11-05T07:01:51.383490dhw.com sshd[526924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84
2026-11-05T07:01:53.535507dhw.com sshd[526924]: Failed password for invalid user samples from 161.97 ...
show more2026-11-05T07:01:51.383490dhw.com sshd[526924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84
2026-11-05T07:01:53.535507dhw.com sshd[526924]: Failed password for invalid user samples from 161.97.138.84 port 35732 ssh2
2026-11-05T07:04:47.194538dhw.com sshd[527050]: Invalid user agenda from 161.97.138.84 port 52774
...
show less
Nov 5 12:01:35 mail sshd[1448000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84
Nov 5 12:01:37 mail sshd[1448000]: Failed password for invalid user samples from 161.97.138.84 port 37674 ssh2 ...
show moreNov 5 12:01:35 mail sshd[1448000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.138.84
Nov 5 12:01:37 mail sshd[1448000]: Failed password for invalid user samples from 161.97.138.84 port 37674 ssh2
Nov 5 12:04:32 mail sshd[1448146]: Invalid user agenda from 161.97.138.84 port 43224
...
show less
Hacking
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 161.97.138.84 (DE/Germany/vmi3654613.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 5 21:31:34 syd2 sshd[1117748]: Invalid user deploy from 161.97.138.84 port 58136
N ...
show more(sshd) Failed SSH login from 161.97.138.84 (DE/Germany/vmi3654613.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 5 21:31:34 syd2 sshd[1117748]: Invalid user deploy from 161.97.138.84 port 58136
Nov 5 21:31:36 syd2 sshd[1117748]: Failed password for invalid user deploy from 161.97.138.84 port 58136 ssh2
Nov 5 21:38:22 syd2 sshd[1118372]: Failed password for root from 161.97.138.84 port 41910 ssh2
Nov 5 21:41:27 syd2 sshd[1118770]: Failed password for root from 161.97.138.84 port 49594 ssh2
Nov 5 21:44:20 syd2 sshd[1118956]: Invalid user devops from 161.97.138.84 port 58546
show less
Port Scan
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
