AbuseIPDB » 161.97.169.148

161.97.169.148 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 88%: ?

88%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi852048.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Munich, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 161.97.169.148

Whois 161.97.169.148

IP Abuse Reports for 161.97.169.148:

This IP address has been reported a total of 158 times from 81 distinct sources. 161.97.169.148 was first reported on January 28th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	16 Mar 2023	Jan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.16 ... show moreJan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.169.148 port 49234 [preauth] Jan 29 10:45:02 router02.w-p-k.de sshd[337771]: Disconnected from authenticating user root 161.97.169.148 port 47374 [preauth] Jan 29 10:46:43 router02.w-p-k.de sshd[337891]: Disconnected from authenticating user root 161.97.169.148 port 47950 [preauth] Jan 29 10:48:25 router02.w-p-k.de sshd[338087]: Disconnected from authenticating user root 161.97.169.148 port 50230 [preauth] Jan 29 10:50:05 router02.w-p-k.de sshd[338312]: Disconnected from authenticating user root 161.97.169.148 port 43142 [preauth] show less	Brute-Force
ipcop.net	16 Mar 2023	Jan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.16 ... show moreJan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.169.148 port 49234 [preauth] Jan 29 10:45:02 router02.w-p-k.de sshd[337771]: Disconnected from authenticating user root 161.97.169.148 port 47374 [preauth] Jan 29 10:46:43 router02.w-p-k.de sshd[337891]: Disconnected from authenticating user root 161.97.169.148 port 47950 [preauth] Jan 29 10:48:25 router02.w-p-k.de sshd[338087]: Disconnected from authenticating user root 161.97.169.148 port 50230 [preauth] Jan 29 10:50:05 router02.w-p-k.de sshd[338312]: Disconnected from authenticating user root 161.97.169.148 port 43142 [preauth] show less	Brute-Force
ipcop.net	16 Mar 2023	Jan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.16 ... show moreJan 29 10:40:38 router02.w-p-k.de sshd[337163]: Disconnected from authenticating user root 161.97.169.148 port 49234 [preauth] Jan 29 10:45:02 router02.w-p-k.de sshd[337771]: Disconnected from authenticating user root 161.97.169.148 port 47374 [preauth] Jan 29 10:46:43 router02.w-p-k.de sshd[337891]: Disconnected from authenticating user root 161.97.169.148 port 47950 [preauth] Jan 29 10:48:25 router02.w-p-k.de sshd[338087]: Disconnected from authenticating user root 161.97.169.148 port 50230 [preauth] Jan 29 10:50:05 router02.w-p-k.de sshd[338312]: Disconnected from authenticating user root 161.97.169.148 port 43142 [preauth] show less	Brute-Force
ghostwarriors	06 Feb 2023	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
Samuel K	31 Jan 2023	Web scan/attack	Port Scan Web App Attack
IrisFlower	31 Jan 2023	Unauthorized connection attempt detected from IP address 161.97.169.148 to port 2323 [J]	Port Scan Hacking
lukgth	31 Jan 2023	$f2bV_matches	Brute-Force SSH
Justin Catello	31 Jan 2023	161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root ... show more161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 30 20:13:19 15888 sshd[12936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.156.242 user=root Jan 30 20:12:59 15888 sshd[12879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.108.218.139 user=root Jan 30 20:13:02 15888 sshd[12879]: Failed password for root from 65.108.218.139 port 45494 ssh2 Jan 30 20:12:05 15888 sshd[12868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 30 20:12:07 15888 sshd[12868]: Failed password for root from 161.97.169.148 port 58230 ssh2 IP Addresses Blocked: 103.83.156.242 (SG/Singapore/mx156242.centerhop.com) 65.108.218.139 (FI/Finland/static.139.218.108.65.clients.your-server.de) show less	Brute-Force SSH
Justin Catello	31 Jan 2023	161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root ... show more161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 30 19:11:06 16625 sshd[26442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 30 19:09:14 16625 sshd[26313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 30 19:08:21 16625 sshd[26254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.90.237 user=root Jan 30 19:08:23 16625 sshd[26254]: Failed password for root from 139.99.90.237 port 35108 ssh2 Jan 30 19:09:17 16625 sshd[26313]: Failed password for root from 161.97.169.148 port 33330 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
bret.dk	31 Jan 2023	Jan 31 01:10:15 es-mirror sshd[1242654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreJan 31 01:10:15 es-mirror sshd[1242654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 31 01:10:16 es-mirror sshd[1242654]: Failed password for root from 161.97.169.148 port 48856 ssh2 ... show less	Brute-Force SSH
thevastnessof.space	31 Jan 2023	Jan 31 00:14:37 thevastnessof sshd[1586522]: pam_unix(sshd:auth): authentication failure; logname= u ... show moreJan 31 00:14:37 thevastnessof sshd[1586522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 31 00:14:40 thevastnessof sshd[1586522]: Failed password for root from 161.97.169.148 port 33982 ssh2 Jan 31 00:16:08 thevastnessof sshd[1586772]: Connection from 161.97.169.148 port 36604 on 172.105.171.124 port 2222 rdomain "" Jan 31 00:16:09 thevastnessof sshd[1586772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 31 00:16:11 thevastnessof sshd[1586772]: Failed password for root from 161.97.169.148 port 36604 ssh2 ... show less	Brute-Force SSH
sid3windr	31 Jan 2023	sshd[4124411]: Failed password for root from 161.97.169.148 port 59170 ssh2 sshd[4141894]: pam ... show moresshd[4124411]: Failed password for root from 161.97.169.148 port 59170 ssh2 sshd[4141894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root sshd[4141894]: Failed password for root from 161.97.169.148 port 51502 ssh2 sshd[4144753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root sshd[4144753]: Failed password for root from 161.97.169.148 port 58668 ssh2 show less	Brute-Force SSH
IrisFlower	31 Jan 2023	Unauthorized connection attempt detected from IP address 161.97.169.148 to port 2323 [J]	Port Scan Hacking
Justin Catello	31 Jan 2023	161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root ... show more161.97.169.148 (DE/Germany/vmi852048.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 30 18:08:18 18047 sshd[1071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.169.148 user=root Jan 30 18:07:52 18047 sshd[1026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.109.179.128 user=root Jan 30 18:07:54 18047 sshd[1026]: Failed password for root from 65.109.179.128 port 52916 ssh2 Jan 30 18:08:09 18047 sshd[1065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.210.252.74 user=root Jan 30 18:08:10 18047 sshd[1065]: Failed password for root from 8.210.252.74 port 48676 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
aorth	31 Jan 2023	Jan 30 09:27:10 Failed password for invalid user root from 161.97.169.148 port 34558	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩