JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.97.172.196

Recent Activity

Abuse Confidence Score

100% Critical

66 reports

60 reporters · latest 1 hour ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi3683177.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

66 from 60 distinct reporters

First reported

November 3rd 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 18 🇺🇸 United States of America 9 🇫🇷 France 6

Most common categories Brute-Force 37 Web App Attack 27 SSH 22 Bad Web Bot 10 Port Scan 6

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 TFG-Server	2026-11-09 08:35:29 UTC · (1 hour ago)	Automated block: Email password guessing x3 in 24 h (mail ports only)	Brute-Force
Anonymous	2026-11-09 08:20:34 UTC · (1 hour ago)	2026-11-09 09:17:33,907 fail2ban.actions [629]: NOTICE [pam-generic] Ban 161.97.172.196 2026-11-09 09:20:33,587 fail2ban.actions [629]: NOTICE [dovecot] Ban 161.97.172.196 ...	Brute-Force
🇺🇸 bigwavedave	2026-11-09 08:09:51 UTC · (1 hour ago)	IMAP or POP3	Brute-Force
🇿🇦 Megasurf	2026-11-09 07:43:44 UTC · (2 hours ago)	IMAP/POP3 mailbox login brute-force. Blocked automatically by our firewall (LF_POP3D).	Brute-Force
🇦🇺 AWW-Admin	2026-11-09 07:38:39 UTC · (2 hours ago)	(pop3d) Failed POP3 login from 161.97.172.196 (FR/France/vmi3683177.contaboserver.net)	Brute-Force
Anonymous	2026-11-09 05:59:55 UTC · (3 hours ago)	2026-11-09T07:25:10.422049+02:00 de-fsn1-host1 sshd-session[2058035]: Invalid user ubuntu from 161.97.172.196 port 47140 2026-11-09T07:42:55.308366+02:00 de-fsn1-host1 sshd-session[2064926]: Invalid user ubuntu from 161.97.172.196 port 37370 2026-11- ... show more 2026-11-09T07:25:10.422049+02:00 de-fsn1-host1 sshd-session[2058035]: Invalid user ubuntu from 161.97.172.196 port 47140 2026-11-09T07:42:55.308366+02:00 de-fsn1-host1 sshd-session[2064926]: Invalid user ubuntu from 161.97.172.196 port 37370 2026-11-09T07:59:55.361922+02:00 de-fsn1-host1 sshd-session[2071554]: Invalid user ubuntu from 161.97.172.196 port 54328 ... show less	Brute-Force SSH
🇵🇱 pshost.pl	2026-11-09 05:19:01 UTC · (4 hours ago)	2026-11-09T05:19:01.332Z, an unauthorized SSH access attempt was detected from source IP address 161.97.172.196 by our NetFlow-based intrusion detection.	Port Scan Brute-Force SSH
Anonymous	2026-11-09 04:15:23 UTC · (5 hours ago)	2026-11-09T05:03:40.668808+02:00 de-fsn1-host1 sshd-session[2001716]: Invalid user ubuntu from 161.97.172.196 port 55340 2026-11-09T05:58:11.645897+02:00 de-fsn1-host1 sshd-session[2023394]: Invalid user ubuntu from 161.97.172.196 port 60014 2026-11- ... show more 2026-11-09T05:03:40.668808+02:00 de-fsn1-host1 sshd-session[2001716]: Invalid user ubuntu from 161.97.172.196 port 55340 2026-11-09T05:58:11.645897+02:00 de-fsn1-host1 sshd-session[2023394]: Invalid user ubuntu from 161.97.172.196 port 60014 2026-11-09T06:15:22.897698+02:00 de-fsn1-host1 sshd-session[2030085]: Invalid user ubuntu from 161.97.172.196 port 53978 ... show less	Brute-Force SSH
🇺🇸 cfultz	2026-11-09 04:05:38 UTC · (5 hours ago)	2026-11-08T22:53:47.433693-04:00 bertha.local sshd-session[3788678]: Invalid user ubuntu from 161.97.172.196 port 40858 2026-11-08T23:48:20.222719-04:00 bertha.local sshd-session[3985718]: Invalid user ubuntu from 161.97.172.196 port 41096 2026-11-09 ... show more 2026-11-08T22:53:47.433693-04:00 bertha.local sshd-session[3788678]: Invalid user ubuntu from 161.97.172.196 port 40858 2026-11-08T23:48:20.222719-04:00 bertha.local sshd-session[3985718]: Invalid user ubuntu from 161.97.172.196 port 41096 2026-11-09T00:05:37.214656-04:00 bertha.local sshd-session[4054397]: Invalid user ubuntu from 161.97.172.196 port 36898 ... show less	Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2026-11-09 03:54:03 UTC · (6 hours ago)	2026-11-09T02:18:18.337097ee-nginx-elbernabeu sshd[9991]: Invalid user ubuntu from 161.97.172.196 port 36520 2026-11-09T03:59:30.692319ee-nginx-elbernabeu sshd[17333]: Invalid user ubuntu from 161.97.172.196 port 34702 2026-11-09T04:54:03.028266ee-ng ... show more 2026-11-09T02:18:18.337097ee-nginx-elbernabeu sshd[9991]: Invalid user ubuntu from 161.97.172.196 port 36520 2026-11-09T03:59:30.692319ee-nginx-elbernabeu sshd[17333]: Invalid user ubuntu from 161.97.172.196 port 34702 2026-11-09T04:54:03.028266ee-nginx-elbernabeu sshd[21354]: Invalid user ubuntu from 161.97.172.196 port 36262 ... show less	Brute-Force SSH
🇩🇪 formality	2026-11-09 03:45:23 UTC · (6 hours ago)	Invalid user ubuntu from 161.97.172.196 port 32908	Brute-Force SSH
🇵🇱 skillhost.pl	2026-11-09 03:01:12 UTC · (6 hours ago)	Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.	Brute-Force SSH
🇫🇮 MindSolve	2026-11-09 02:02:00 UTC · (7 hours ago)	2026-11-09T03:28:12.981216+02:00 admin sshd[2595847]: Failed password for root from 161.97.172.196 port 44340 ssh2 2026-11-09T03:45:13.412347+02:00 admin sshd[2602570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more 2026-11-09T03:28:12.981216+02:00 admin sshd[2595847]: Failed password for root from 161.97.172.196 port 44340 ssh2 2026-11-09T03:45:13.412347+02:00 admin sshd[2602570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.172.196 user=root 2026-11-09T03:45:15.576238+02:00 admin sshd[2602570]: Failed password for root from 161.97.172.196 port 60046 ssh2 2026-11-09T04:01:56.312632+02:00 admin sshd[2609270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.172.196 user=root 2026-11-09T04:01:58.170209+02:00 admin sshd[2609270]: Failed password for root from 161.97.172.196 port 56644 ssh2 ... show less	Brute-Force SSH
🇫🇷 dsl	2026-11-09 01:23:05 UTC · (8 hours ago)	Nov 9 01:23:01 dabeau sshd[18888]: Invalid user ubuntu from 161.97.172.196 port 45346 Nov 9 01:23:01 dabeau sshd[18888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.172.196 Nov 9 01:23:03 dabeau ... show more Nov 9 01:23:01 dabeau sshd[18888]: Invalid user ubuntu from 161.97.172.196 port 45346 Nov 9 01:23:01 dabeau sshd[18888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.172.196 Nov 9 01:23:03 dabeau sshd[18888]: Failed password for invalid user ubuntu from 161.97.172.196 port 45346 ssh2 ... show less	Brute-Force SSH
🇫🇷 weHateBots	2026-11-09 01:20:29 UTC · (8 hours ago)	Nov 9 02:20:25 zulu1924 sshd[1463397]: Invalid user ubuntu from 161.97.172.196 port 43948 Nov 9 02:20:27 zulu1924 sshd[1463397]: Failed password for invalid user ubuntu from 161.97.172.196 port 43948 ssh2	Brute-Force SSH

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1056:1000:681d:cbe6:192c:9c47

🇳🇱 185.229.191.36

🇵🇱 162.158.103.22

🇺🇸 148.135.0.242

🇺🇸 143.110.204.24

🇳🇱 109.160.32.131

🇺🇸 95.163.148.37

🇨🇳 82.157.144.177

🇮🇶 65.20.230.238

🇮🇹 62.173.162.64

🇫🇷 51.158.123.149

🇺🇸 47.77.212.108

🇳🇱 45.148.10.141

🇵🇱 2400:cb00:73:1000:b319:2a96:27da:61ad

🇲🇾 202.184.148.229

🇳🇱 192.253.248.223

🇷🇸 170.62.245.47

🇺🇸 162.252.53.202

🇸🇳 154.125.228.145

🇧🇷 45.224.210.26