161.97.71.48

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
133 reports
34 reporters ยท latest 1 day ago
ISP Contabo GmbH
Usage Type Data Center/Web Hosting/Transit
ASN AS51167
Hostname(s) vmi3620607.contaboserver.net
Domain Name contabo.com
Country ๐Ÿ‡ซ๐Ÿ‡ท France
City Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 161.97.71.48

This IP address has been reported a total of 133 times from 34 distinct sources. 161.97.71.48 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: France with 67 reports; Germany with 46 reports; Finland with 7 reports. The most common categories in these recent reports were: Port Scan 95 times; Web App Attack 32 times; Hacking 17 times; Bad Web Bot 7 times; Brute-Force 6 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 1764 hits on ports [3000] (automated)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช EnthecSolutions
Detected by Enthec Solutions. | Attempts: 95 in 24h | Target port: 3000
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท AmStaff
Honeypot: web exploitation attempts. Targeted ports: 3000.
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท fzc2000
Repeated TCP connections to unused ports on a honeypot
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 884 hits on ports [3000] (automated)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Tamsweb
Unauthorized connection attempt or scan from 161.97.71.48 on port 40284 ...
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Little Iguana
trying to access non-authorized port
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=3000 DPT=3000 DPT=3000
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช EinfxchFinn
Unauthorized connection attempt to port 3000 from 161.97.71.48
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท agroman93
T-Pot honeypot: 881 hits on ports [3000] (automated)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)
Hacking Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท AmStaff
Honeypot: web exploitation attempts. Targeted ports: 3000.
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Zikmadol
Trapline honeypot: MCP server abuse. Feed: https://github.com/Zikmadol/trapline-ioc
Web App Attack
Anonymous
Port Scan Brute-Force

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฌ๐Ÿ‡ง 193.32.209.245
๐Ÿ‡ฒ๐Ÿ‡ฝ 189.143.66.6
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.119
๐Ÿ‡บ๐Ÿ‡ธ 156.232.13.218
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.147
๐Ÿ‡ฉ๐Ÿ‡ช 138.199.226.235
๐Ÿ‡ฏ๐Ÿ‡ต 132.145.112.250
๐Ÿ‡ป๐Ÿ‡ณ 103.68.68.121
๐Ÿ‡ง๐Ÿ‡ซ 102.180.60.64
๐Ÿ‡บ๐Ÿ‡ธ 23.234.101.224
๐Ÿ‡บ๐Ÿ‡ธ 23.234.101.221
๐Ÿ‡บ๐Ÿ‡ธ 23.234.101.34
๐Ÿ‡ง๐Ÿ‡ท 172.69.20.145
๐Ÿ‡จ๐Ÿ‡ณ 110.249.201.182
๐Ÿ‡ฎ๐Ÿ‡ณ 103.76.56.78
๐Ÿ‡ญ๐Ÿ‡ฐ 101.36.107.233
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.72
๐Ÿ‡ฎ๐Ÿ‡น 57.131.22.203
๐Ÿ‡ธ๐Ÿ‡ฌ 47.128.115.213
๐Ÿ‡บ๐Ÿ‡ธ 23.234.101.217