AbuseIPDB » 161.97.140.161

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.186.43, microsoft.com, or 5.188.10.0/24

161.97.140.161 was found in our database!

This IP was reported 450 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi485438.contaboserver.net
Domain Name	contabo.de
Country	Germany
City	Munich, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 161.97.140.161

Whois 161.97.140.161

IP Abuse Reports for 161.97.140.161:

This IP address has been reported a total of 450 times from 100 distinct sources. 161.97.140.161 was first reported on January 4th 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
f-d-m	8 hours ago	y+ssh-bruteforce	Brute-Force SSH
Hugo	8 hours ago	Mar 4 16:17:33 ns3033917 sshd[24471]: Failed password for root from 161.97.140.161 port 49592 ssh2< ... show moreMar 4 16:17:33 ns3033917 sshd[24471]: Failed password for root from 161.97.140.161 port 49592 ssh2 Mar 4 16:17:54 ns3033917 sshd[24473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=root Mar 4 16:17:57 ns3033917 sshd[24473]: Failed password for root from 161.97.140.161 port 37028 ssh2 ... show less	Brute-Force SSH
Skymote.net	8 hours ago	Connection to port tcp/22	Port Scan
www.blocklist.de	03 Mar 2021	Lines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd ... show moreLines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:30 rancher sshd[31209]: Failed password for r.r from 161.97.140.161 port 40780 ssh2 Mar 1 18:53:31 rancher sshd[31209]: Received disconnect from 161.97.140.161 port 40780:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:31 rancher sshd[31209]: Disconnected from authenticating user r.r 161.97.140.161 port 40780 [preauth] Mar 1 18:53:43 rancher sshd[31333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:45 rancher sshd[31333]: Failed password for r.r from 161.97.140.161 port 50246 ssh2 Mar 1 18:53:46 rancher sshd[31333]: Received disconnect from 161.97.140.161 port 50246:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:46 rancher sshd[31333]: Disconnected ........ ------------------------------ show less	FTP Brute-Force Hacking
MindSolve	03 Mar 2021	Mar 3 17:38:56 proxng sshd[6643]: Failed password for root from 161.97.140.161 port 39830 ssh2	Brute-Force SSH
Bruno	02 Mar 2021	Mar 2 20:07:45 ns382633 sshd\[29043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid ... show moreMar 2 20:07:45 ns382633 sshd\[29043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=root Mar 2 20:07:45 ns382633 sshd\[29044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=root Mar 2 20:07:47 ns382633 sshd\[29043\]: Failed password for root from 161.97.140.161 port 43792 ssh2 Mar 2 20:07:47 ns382633 sshd\[29044\]: Failed password for root from 161.97.140.161 port 43472 ssh2 Mar 2 20:08:32 ns382633 sshd\[29098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=root show less	Brute-Force SSH
www.blocklist.de	01 Mar 2021	Lines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd ... show moreLines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:30 rancher sshd[31209]: Failed password for r.r from 161.97.140.161 port 40780 ssh2 Mar 1 18:53:31 rancher sshd[31209]: Received disconnect from 161.97.140.161 port 40780:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:31 rancher sshd[31209]: Disconnected from authenticating user r.r 161.97.140.161 port 40780 [preauth] Mar 1 18:53:43 rancher sshd[31333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:45 rancher sshd[31333]: Failed password for r.r from 161.97.140.161 port 50246 ssh2 Mar 1 18:53:46 rancher sshd[31333]: Received disconnect from 161.97.140.161 port 50246:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:46 rancher sshd[31333]: Disconnected ........ ------------------------------ show less	FTP Brute-Force Hacking
www.blocklist.de	01 Mar 2021	Lines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd ... show moreLines containing failures of 161.97.140.161 Mar 1 18:53:28 rancher sshd[31209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:30 rancher sshd[31209]: Failed password for r.r from 161.97.140.161 port 40780 ssh2 Mar 1 18:53:31 rancher sshd[31209]: Received disconnect from 161.97.140.161 port 40780:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:31 rancher sshd[31209]: Disconnected from authenticating user r.r 161.97.140.161 port 40780 [preauth] Mar 1 18:53:43 rancher sshd[31333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.140.161 user=r.r Mar 1 18:53:45 rancher sshd[31333]: Failed password for r.r from 161.97.140.161 port 50246 ssh2 Mar 1 18:53:46 rancher sshd[31333]: Received disconnect from 161.97.140.161 port 50246:11: Normal Shutdown, Thank you for playing [preauth] Mar 1 18:53:46 rancher sshd[31333]: Disconnected ........ ------------------------------ show less	FTP Brute-Force Hacking
muety	01 Mar 2021	Banned after 3 attempts against sshd	Brute-Force SSH
formality	28 Feb 2021	Invalid user git from 161.97.140.161 port 35422	Brute-Force SSH
vereinshosting	28 Feb 2021	Fail2Ban	Brute-Force SSH
iNetWorker	28 Feb 2021	trying to access non-authorized port	Port Scan
Anonymous	27 Feb 2021	Feb 28 03:40:25 mail sshd[5881]: refused connect from vmi485438.contaboserver.net (161.97.140.161)<b ... show moreFeb 28 03:40:25 mail sshd[5881]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:41:15 mail sshd[5918]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:42:07 mail sshd[5995]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:43:00 mail sshd[6033]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:43:55 mail sshd[6055]: refused connect from vmi485438.contaboserver.net (161.97.140.161) ... show less	Brute-Force SSH
Anonymous	27 Feb 2021	Feb 28 03:13:34 mail sshd[4578]: refused connect from vmi485438.contaboserver.net (161.97.140.161)<b ... show moreFeb 28 03:13:34 mail sshd[4578]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:14:24 mail sshd[4601]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:15:11 mail sshd[4628]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:15:57 mail sshd[4660]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 03:16:48 mail sshd[4711]: refused connect from vmi485438.contaboserver.net (161.97.140.161) ... show less	Brute-Force SSH
Anonymous	27 Feb 2021	Feb 28 02:47:18 mail sshd[3103]: refused connect from vmi485438.contaboserver.net (161.97.140.161)<b ... show moreFeb 28 02:47:18 mail sshd[3103]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 02:48:03 mail sshd[3116]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 02:48:46 mail sshd[3137]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 02:49:30 mail sshd[3151]: refused connect from vmi485438.contaboserver.net (161.97.140.161) Feb 28 02:50:18 mail sshd[3215]: refused connect from vmi485438.contaboserver.net (161.97.140.161) ... show less	Brute-Force SSH