JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.166.185

161.97.166.185 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 23%: ?

23%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3306007.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.166.185

Whois 161.97.166.185

IP Abuse Reports for 161.97.166.185:

This IP address has been reported a total of 32 times from 20 distinct sources. 161.97.166.185 was first reported on April 15th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 [email protected]	2026-07-18 16:48:26 (5 hours ago)	Attack attempt against Interwebbi servers; (PERMBLOCK) 161.97.166.185 (FR/France/vmi3306007.contabos ... show more Attack attempt against Interwebbi servers; (PERMBLOCK) 161.97.166.185 (FR/France/vmi3306007.contaboserver.net) has had more than 4 temp blocks in the last 86400 secs; IP: 161.97.166.185; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; show less	Brute-Force
🇫🇮 [email protected]	2026-07-18 12:46:35 (9 hours ago)	Attack attempt against Interwebbi servers; (ftpd) Failed FTP login from 161.97.166.185 (FR/France/vm ... show more Attack attempt against Interwebbi servers; (ftpd) Failed FTP login from 161.97.166.185 (FR/France/vmi3306007.contaboserver.net): 10 in the last 3600 secs; IP: 161.97.166.185; Ports: *; Direction: 0; Trigger: LF_FTPD; show less	Brute-Force
🇭🇺 kranem	2026-07-18 12:46:22 (9 hours ago)	2026-07-18T14:46:00.853393+02:00 CORE-0 sshd[1398358]: Failed password for root from 161.97.166.185 ... show more 2026-07-18T14:46:00.853393+02:00 CORE-0 sshd[1398358]: Failed password for root from 161.97.166.185 port 41030 ssh2 2026-07-18T14:46:00.524799+02:00 CORE-0 sshd[1408787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.166.185 user=root 2026-07-18T14:46:02.666458+02:00 CORE-0 sshd[1408787]: Failed password for root from 161.97.166.185 port 53528 ssh2 2026-07-18T14:46:19.540252+02:00 CORE-0 sshd[1414241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.166.185 user=root 2026-07-18T14:46:21.958409+02:00 CORE-0 sshd[1414241]: Failed password for root from 161.97.166.185 port 36678 ssh2 ... show less	Brute-Force SSH
🇫🇷 evvsk	2026-07-18 12:46:02 (9 hours ago)	SSH Brute Force: 10+ attempts.	Brute-Force SSH
🇫🇷 evvsk	2026-07-18 10:35:13 (11 hours ago)	222/tcp	Port Scan
🇩🇪 itak	2026-04-18 13:03:59 (3 months ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force
🇺🇸 bigwavedave	2026-04-18 13:00:03 (3 months ago)	IMAP or POP3	Brute-Force
🇺🇸 Brian Minton	2026-04-17 14:04:32 (3 months ago)	2026-04-17T07:52:22.549090-05:00 lab dovecot: imap-login: Disconnected: Connection closed (auth fail ... show more 2026-04-17T07:52:22.549090-05:00 lab dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=161.97.166.185, lip=199.181.238.151, TLS, session=<VwpOa6dPvpOhYaa5> 2026-04-17T08:10:05.284931-05:00 lab dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=161.97.166.185, lip=199.181.238.151, TLS, session=<QbapqqdPLKqhYaa5> 2026-04-17T08:27:49.295079-05:00 lab dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=161.97.166.185, lip=199.181.238.151, TLS, session=<4b4W6qdPKLuhYaa5> 2026-04-17T08:45:38.560920-05:00 lab dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=161.97.166.185, lip=199.181.238.151, TLS, session=<rSLJKahPZNGhYaa5> 2026-04-17T09:04:31.4815 ... show less	Brute-Force
Anonymous	2026-04-17 13:22:06 (3 months ago)	dovecot	Brute-Force Web App Attack
Anonymous	2026-04-17 13:02:59 (3 months ago)	2026-04-17T05:45:16.738418-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logna ... show more 2026-04-17T05:45:16.738418-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=support rhost=161.97.166.185 2026-04-17T06:02:58.823981-07:00 gremlin auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=contact rhost=161.97.166.185 ... show less	Brute-Force SSH
🇳🇱 BlueWire Hosting	2026-04-17 12:56:50 (3 months ago)	POP/IMAP brute force attempt	Brute-Force
🇩🇪 iNetWorker	2026-04-17 12:52:17 (3 months ago)	pop/imap	Brute-Force
🇺🇸 bigwavedave	2026-04-17 12:49:56 (3 months ago)	IMAP or POP3	Brute-Force
🇩🇪 itak	2026-04-17 12:36:01 (3 months ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force
🇺🇸 PKThai	2026-04-16 04:10:58 (3 months ago)	Attempted brute-force SASL access to mail server - Repeat offender 161.97.166.185 banned at least 8 ... show more Attempted brute-force SASL access to mail server - Repeat offender 161.97.166.185 banned at least 8 times in the last 7 days show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.126

🇻🇳 116.99.171.3

🇺🇸 104.197.69.115

🇳🇱 45.148.10.151

🇰🇷 175.198.62.180

🇭🇰 47.243.26.215

🇨🇳 42.83.147.53

🇰🇭 202.79.29.108

🇻🇪 186.96.67.25

🇪🇨 181.188.237.220

🇩🇪 178.20.28.16

🇨🇳 171.37.160.212

🇲🇦 102.54.246.130

🇺🇸 38.148.249.2

🇺🇸 2607:f8b0:4023:100f::12e

🇻🇳 210.245.20.230

🇳🇱 195.178.110.30

🇩🇪 87.106.141.44

🇩🇪 80.158.109.51

🇬🇧 35.203.211.228