JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.74.181

161.97.74.181 was found in our database!

This IP was reported 96 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3103696.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.74.181

Whois 161.97.74.181

IP Abuse Reports for 161.97.74.181:

This IP address has been reported a total of 96 times from 60 distinct sources. 161.97.74.181 was first reported on October 11th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-10-13 20:09:20 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-10-13 15:27:05 (8 months ago)	This IP address carried out 112 port scanning attempts on 12-10-2025. For more information or to rep ... show more This IP address carried out 112 port scanning attempts on 12-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2025-10-13 08:24:07 (8 months ago)	This IP address carried out 22 SSH credential attack (attempts) on 12-10-2025. For more information ... show more This IP address carried out 22 SSH credential attack (attempts) on 12-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-10-13 00:09:18 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-12 20:09:19 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 MBILOCOM	2025-10-12 07:27:01 (8 months ago)		Brute-Force SSH
🇨🇳 Indexyz	2025-10-12 07:24:54 (8 months ago)	2025-10-12T15:20:51.414259+08:00 hostname sshd-session[2940454]: Invalid user peter from 161.97.74 ... show more 2025-10-12T15:20:51.414259+08:00 hostname sshd-session[2940454]: Invalid user peter from 161.97.74.181 port 39254 2025-10-12T15:22:36.966636+08:00 hostname sshd-session[2940667]: Connection from 161.97.74.181 port 50914 on 10.0.4.13 port 22 rdomain "" 2025-10-12T15:22:38.737552+08:00 hostname sshd-session[2940667]: Invalid user luo from 161.97.74.181 port 50914 2025-10-12T15:24:39.393995+08:00 hostname sshd-session[2940887]: Connection from 161.97.74.181 port 35630 on 10.0.4.13 port 22 rdomain "" 2025-10-12T15:24:43.552067+08:00 hostname sshd-session[2940887]: Invalid user vincenzo from 161.97.74.181 port 35630 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-12 07:20:11 (8 months ago)	(sshd) Failed SSH login from 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net): 5 in th ... show more (sshd) Failed SSH login from 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 12 02:13:12 10219 sshd[32557]: Invalid user aluno from 161.97.74.181 port 44102 Oct 12 02:13:14 10219 sshd[32557]: Failed password for invalid user aluno from 161.97.74.181 port 44102 ssh2 Oct 12 02:17:19 10219 sshd[406]: Invalid user nominatim from 161.97.74.181 port 34364 Oct 12 02:17:22 10219 sshd[406]: Failed password for invalid user nominatim from 161.97.74.181 port 34364 ssh2 Oct 12 02:19:50 10219 sshd[867]: Invalid user peter from 161.97.74.181 port 41500 show less	Brute-Force SSH
🇺🇸 drodrig	2025-10-12 07:08:52 (8 months ago)	CrowdSec triggered: %!s(*string=0xc005317e30) (0 events)	Brute-Force
🇺🇸 bigscoots.com	2025-10-12 06:14:28 (8 months ago)	(sshd) Failed SSH login from 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net): 5 in th ... show more (sshd) Failed SSH login from 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 12 01:08:37 15690 sshd[21107]: Invalid user admins from 161.97.74.181 port 54686 Oct 12 01:08:39 15690 sshd[21107]: Failed password for invalid user admins from 161.97.74.181 port 54686 ssh2 Oct 12 01:12:24 15690 sshd[21526]: Invalid user bonus from 161.97.74.181 port 58790 Oct 12 01:12:26 15690 sshd[21526]: Failed password for invalid user bonus from 161.97.74.181 port 58790 ssh2 Oct 12 01:14:13 15690 sshd[21665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root show less	Brute-Force SSH
Anonymous	2025-10-12 05:40:57 (8 months ago)	Automatic Reporting - Brute Force Attempts	Brute-Force Web App Attack SSH
🇦🇹 paradoxnetworks	2025-10-12 05:23:11 (8 months ago)	2025-10-12T05:21:15.697768+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[1533349]: pam_unix(sshd:auth): a ... show more 2025-10-12T05:21:15.697768+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[1533349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root 2025-10-12T05:21:18.277349+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[1533349]: Failed password for root from 161.97.74.181 port 47600 ssh2 2025-10-12T05:23:09.888638+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[1533761]: Invalid user testuser from 161.97.74.181 port 41508 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-12 05:22:28 (8 months ago)	161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net), 5 distributed sshd attacks on accoun ... show more 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 12 00:18:41 17885 sshd[28436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.174.129.232 user=root Oct 12 00:17:46 17885 sshd[28315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root Oct 12 00:17:48 17885 sshd[28315]: Failed password for root from 161.97.74.181 port 53074 ssh2 Oct 12 00:22:14 17885 sshd[29134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root Oct 12 00:22:16 17885 sshd[29134]: Failed password for root from 161.97.74.181 port 42114 ssh2 IP Addresses Blocked: 160.174.129.232 (MA/Morocco/-) show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-10-12 04:10:22 (8 months ago)	Oct 11 22:07:09 iveco sshd[2729862]: Failed password for invalid user shweta from 161.97.74.181 port ... show more Oct 11 22:07:09 iveco sshd[2729862]: Failed password for invalid user shweta from 161.97.74.181 port 33356 ssh2 Oct 11 22:10:19 iveco sshd[2730092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root Oct 11 22:10:21 iveco sshd[2730092]: Failed password for root from 161.97.74.181 port 60830 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-12 04:10:18 (8 months ago)	161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net), 5 distributed sshd attacks on accoun ... show more 161.97.74.181 (GB/United Kingdom/vmi2673902.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 11 23:09:04 13584 sshd[11499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.4.244.107 user=root Oct 11 23:09:06 13584 sshd[11499]: Failed password for root from 155.4.244.107 port 31638 ssh2 Oct 11 23:07:24 13584 sshd[11353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.83.217.194 user=root Oct 11 23:07:25 13584 sshd[11353]: Failed password for root from 183.83.217.194 port 43984 ssh2 Oct 11 23:09:58 13584 sshd[11510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.74.181 user=root IP Addresses Blocked: 155.4.244.107 (SE/Sweden/h-155-4-244-107.NA.cust.bahnhof.se) 183.83.217.194 (IN/India/183.83.217.194.actcorp.in) show less	Brute-Force SSH

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 217.26.179.94

🇺🇸 216.26.226.42

🇺🇸 91.193.232.150

🇨🇳 58.50.197.64

🇺🇸 35.202.225.123

🇨🇳 223.151.73.82

🇦🇷 186.131.215.172

🇮🇳 185.100.212.141

🇵🇰 160.250.122.105

🇺🇸 147.185.132.57

🇭🇰 103.100.208.168

🇸🇬 101.47.15.26

🇩🇪 64.89.163.26

🇸🇬 47.82.54.55

🇳🇱 45.148.10.121

🇮🇳 182.95.12.178

🇺🇸 108.181.23.81

🇧🇷 45.229.91.34

🇪🇬 197.45.16.194

🇹🇷 185.221.64.22