JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.149.197

161.97.149.197 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3061481.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.149.197

Whois 161.97.149.197

IP Abuse Reports for 161.97.149.197:

This IP address has been reported a total of 59 times from 31 distinct sources. 161.97.149.197 was first reported on June 18th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-07-17 20:07:44 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-07-16 20:07:43 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-07-16 09:14:51 (10 months ago)	161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 16 08:27:26 23655 sshd[24614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.156.46 user=root Jul 16 08:27:29 23655 sshd[24614]: Failed password for root from 152.32.156.46 port 47166 ssh2 Jul 16 08:27:30 23655 sshd[24616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.156.46 user=root Jul 16 08:27:32 23655 sshd[24616]: Failed password for root from 152.32.156.46 port 47364 ssh2 Jul 16 09:14:33 23655 sshd[28050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root IP Addresses Blocked: 152.32.156.46 (IN/India/-) show less	Brute-Force SSH
🇨🇿 paradoxnetworks	2025-07-16 09:14:46 (10 months ago)	2025-07-16T09:14:42.011098+00:00 edge-ttc-prg01.int.pdx.net.uk sshd[3561163]: Failed password for ro ... show more 2025-07-16T09:14:42.011098+00:00 edge-ttc-prg01.int.pdx.net.uk sshd[3561163]: Failed password for root from 161.97.149.197 port 58884 ssh2 2025-07-16T09:14:43.652798+00:00 edge-ttc-prg01.int.pdx.net.uk sshd[3561194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T09:14:45.150064+00:00 edge-ttc-prg01.int.pdx.net.uk sshd[3561194]: Failed password for root from 161.97.149.197 port 58886 ssh2 ... show less	Brute-Force SSH
🇮🇹 NukeDuke	2025-07-16 08:36:29 (10 months ago)	161.97.149.197 abuse ...	Brute-Force SSH
🇸🇬 drewf.ink	2025-07-16 08:32:54 (10 months ago)	[08:32] Attempted SSH login on port 22 with credentials root:------fuck------	Brute-Force SSH
🇺🇸 bigscoots.com	2025-07-16 08:12:29 (10 months ago)	161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 16 02:45:38 12726 sshd[14149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.44.250.80 user=root Jul 16 02:45:40 12726 sshd[14149]: Failed password for root from 113.44.250.80 port 34548 ssh2 Jul 16 03:12:17 12726 sshd[16150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root Jul 16 03:12:20 12726 sshd[16150]: Failed password for root from 161.97.149.197 port 37110 ssh2 Jul 16 03:12:21 12726 sshd[16152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root IP Addresses Blocked: 113.44.250.80 (CN/China/ecs-113-44-250-80.compute.hwclouds-dns.com) show less	Brute-Force SSH
🇫🇮 pr0vieh	2025-07-16 08:11:35 (10 months ago)	2025-07-16T08:11:15.068676+00:00 Linux07 sshd[1531656]: pam_unix(sshd:auth): authentication failure; ... show more 2025-07-16T08:11:15.068676+00:00 Linux07 sshd[1531656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T08:11:17.129097+00:00 Linux07 sshd[1531656]: Failed password for root from 161.97.149.197 port 55152 ssh2 2025-07-16T08:11:18.792727+00:00 Linux07 sshd[1531800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T08:11:20.597093+00:00 Linux07 sshd[1531800]: Failed password for root from 161.97.149.197 port 55164 ssh2 2025-07-16T08:11:22.491777+00:00 Linux07 sshd[1531896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T08:11:24.180086+00:00 Linux07 sshd[1531896]: Failed password for root from 161.97.149.197 port 55176 ssh2 2025-07-16T08:11:26.548914+00:00 Linux07 sshd[1532020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-07-16 03:57:03 (10 months ago)	161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 15 22:24:23 14352 sshd[5287]: Failed password for root from 112.15.12.42 port 38322 ssh2 Jul 15 22:23:14 14352 sshd[5224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.15.12.42 user=root Jul 15 22:23:16 14352 sshd[5224]: Failed password for root from 112.15.12.42 port 39984 ssh2 Jul 15 22:56:49 14352 sshd[7742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root Jul 15 22:24:21 14352 sshd[5287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.15.12.42 user=root IP Addresses Blocked: 112.15.12.42 (CN/China/-) show less	Brute-Force SSH
Anonymous	2025-07-16 03:31:32 (10 months ago)	Automated abuse report by SpeedIT Security Team	Brute-Force Exploited Host SSH
🇺🇸 bigscoots.com	2025-07-16 02:09:48 (10 months ago)	(sshd) Failed SSH login from 161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 161.97.149.197 (DE/Germany/vmi2646786.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 15 21:09:35 13361 sshd[30916]: Did not receive identification string from 161.97.149.197 port 57806 Jul 15 21:09:36 13361 sshd[30917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root Jul 15 21:09:37 13361 sshd[30917]: Failed password for root from 161.97.149.197 port 57808 ssh2 Jul 15 21:09:38 13361 sshd[30919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root Jul 15 21:09:41 13361 sshd[30919]: Failed password for root from 161.97.149.197 port 57824 ssh2 show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2025-07-16 00:38:07 (10 months ago)	2025-07-16T00:37:56.892966+00:00 lo sshd[1186649]: Failed password for root from 161.97.149.197 port ... show more 2025-07-16T00:37:56.892966+00:00 lo sshd[1186649]: Failed password for root from 161.97.149.197 port 55200 ssh2 2025-07-16T00:38:04.946050+00:00 lo sshd[1186694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T00:38:06.354599+00:00 lo sshd[1186694]: Failed password for root from 161.97.149.197 port 58688 ssh2 ... show less	Brute-Force SSH
🇩🇪 sbajic	2025-07-16 00:35:09 (10 months ago)	2025-07-16T02:35:03.460623+02:00 mercurius sshd[1543976]: pam_unix(sshd:auth): authentication failur ... show more 2025-07-16T02:35:03.460623+02:00 mercurius sshd[1543976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T02:35:05.153822+02:00 mercurius sshd[1543976]: Failed password for invalid user root from 161.97.149.197 port 57378 ssh2 2025-07-16T02:35:08.831322+02:00 mercurius sshd[1543979]: User root from 161.97.149.197 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇻🇳 sh97	2025-07-15 23:12:10 (10 months ago)	2025-07-16T04:20:54.160293+05:30 VN01-GC sshd[3239989]: Failed password for root from 161.97.149.197 ... show more 2025-07-16T04:20:54.160293+05:30 VN01-GC sshd[3239989]: Failed password for root from 161.97.149.197 port 39146 ssh2 2025-07-16T04:20:56.192223+05:30 VN01-GC sshd[3239992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.149.197 user=root 2025-07-16T04:20:57.951740+05:30 VN01-GC sshd[3239992]: Failed password for root from 161.97.149.197 port 33462 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigwavedave	2025-07-15 23:11:42 (10 months ago)	SSH	Brute-Force SSH

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.15

🇩🇪 176.65.132.117

🇺🇸 172.208.48.177

🇬🇦 102.142.28.60

🇱🇹 45.227.254.170

🇬🇧 37.143.61.84

🇬🇧 5.226.140.13

🇸🇬 194.61.41.242

🇳🇱 185.226.197.75

🇳🇱 176.65.149.167

🇺🇸 162.216.149.105

🇳🇴 92.220.103.116

🇬🇧 92.207.4.157

🇩🇪 69.5.169.237

🇺🇸 66.132.195.114

🇨🇳 61.171.95.18

🇫🇷 51.77.158.34

🇫🇷 5.39.1.237

🇺🇸 3.142.170.60

🇧🇷 2804:b34:303a:7001:a8f2:7d72:23ca:d4b3