JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.214.161.110

173.214.161.110 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 68%: ?

68%

ISP	Interserver, Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26666
Domain Name	interserver.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.214.161.110

Whois 173.214.161.110

IP Abuse Reports for 173.214.161.110:

This IP address has been reported a total of 22 times from 19 distinct sources. 173.214.161.110 was first reported on November 28th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-14 22:56:00 (6 days ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 Jochen Pretli	2026-09-13 19:53:35 (1 week ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 evvsk	2026-09-08 12:44:12 (1 week ago)	SSH Brute Force (10+ retries)	Brute-Force SSH
🇫🇷 tiroro974	2026-09-08 12:43:59 (1 week ago)	2026-09-08T12:34:01.746179+00:00 vps-46c954c2 sshd[54962]: Invalid user ec2-user from 173.214.161.11 ... show more 2026-09-08T12:34:01.746179+00:00 vps-46c954c2 sshd[54962]: Invalid user ec2-user from 173.214.161.110 port 34724 2026-09-08T12:37:25.489885+00:00 vps-46c954c2 sshd[54998]: Invalid user prova from 173.214.161.110 port 50632 2026-09-08T12:43:58.745049+00:00 vps-46c954c2 sshd[55063]: Invalid user user from 173.214.161.110 port 40826 ... show less	Brute-Force SSH
🇫🇷 baphomet	2026-09-08 12:33:07 (1 week ago)	SSH honeypot login attempts; session never became a real shell. TCP/2222 SSH honeypot; handshake com ... show more SSH honeypot login attempts; session never became a real shell. TCP/2222 SSH honeypot; handshake completed, no real shell. jail=cowrie proto=tcp port=2222 failures>=3 users=ubuntu,root method=password-auth auth_result=none_succeeded this is not the production sshd when=2026-09-08T12:33:07Z sensor=fail2ban role=ssh-honeypot src=173.214.161.110 show less	Brute-Force SSH
🇫🇷 geeek	2026-09-08 12:26:49 (1 week ago)	Port scanning: 2222 TCP Blocked	Port Scan
🇫🇷 zulzeen	2026-09-08 12:23:46 (1 week ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SSH Attack)	SSH Brute-Force
🇩🇪 Jochen Pretli	2026-09-08 10:20:57 (1 week ago)	connection to honeypot	Email Spam Port Scan
🇮🇪 Coolnagour	2026-09-08 09:57:06 (1 week ago)	funnypot SSH honeypot, port 2222: connect SSH-2.0-OpenSSH	Brute-Force SSH
Anonymous	2026-09-08 08:14:54 (1 week ago)	2026-09-08T10:14:53.408594+02:00 vps kernel: [5226102.932018] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-08T10:14:53.408594+02:00 vps kernel: [5226102.932018] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=173.214.161.110 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=33674 PROTO=TCP SPT=53860 DPT=2222 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-09-08 07:55:35 (1 week ago)	Sep 8 01:57:53 localhost kernel: [117192196.607284] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 8 01:57:53 localhost kernel: [117192196.607284] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=173.214.161.110 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=241 ID=27186 PROTO=TCP SPT=51170 DPT=2222 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 8 01:57:53 localhost kernel: [117192196.607303] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=173.214.161.110 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=241 ID=27186 PROTO=TCP SPT=51170 DPT=2222 SEQ=3955426018 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 8 03:55:35 localhost kernel: [117199257.678588] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=173.214.161.110 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13838 PROTO=TCP SPT=53899 DPT=2222 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 8 03:55:35 localhost kernel: [117199257.678614] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=173.214.161.110 DST=[mungedIP2] LEN= show less	Port Scan
🇩🇪 harikalarkutusu	2026-09-08 06:41:25 (1 week ago)	(sshd) Failed SSH login from 173.214.161.110 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 173.214.161.110 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: Sep 8 08:15:57 localhost sshd[643443]: Invalid user sugon from 173.214.161.110 port 51336 Sep 8 08:22:58 localhost sshd[643632]: Invalid user debian from 173.214.161.110 port 55366 Sep 8 08:26:18 localhost sshd[643715]: Invalid user postgres from 173.214.161.110 port 46760 Sep 8 08:33:40 localhost sshd[643917]: Invalid user sadri from 173.214.161.110 port 52282 Sep 8 08:41:20 localhost sshd[644204]: Invalid user user2 from 173.214.161.110 port 58074 show less	FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇩🇪 lister171254	2026-09-08 06:18:33 (1 week ago)	2026-09-08T08:14:15.410169+02:00 thelists sshd[931058]: Connection closed by 173.214.161.110 port 38 ... show more 2026-09-08T08:14:15.410169+02:00 thelists sshd[931058]: Connection closed by 173.214.161.110 port 38542 [preauth] 2026-09-08T08:15:02.139923+02:00 thelists sshd[931430]: Invalid user sugon from 173.214.161.110 port 38302 2026-09-08T08:15:02.285444+02:00 thelists sshd[931430]: Connection closed by invalid user sugon 173.214.161.110 port 38302 [preauth] 2026-09-08T08:18:32.350553+02:00 thelists sshd[934765]: Connection closed by authenticating user root 173.214.161.110 port 42484 [preauth] ... show less	Brute-Force SSH
🇧🇷 somosbr	2026-09-08 06:12:43 (1 week ago)	[2026-09-08T06:12:43Z] Unsolicited scan from 173.214.161.110 to port 2222/tcp	Port Scan
🇫🇷 EDSL	2026-09-08 04:10:17 (1 week ago)	[SRV-VPN1] Blocked by SysWarden Firewall (SSH Attack)	SSH Brute-Force Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.42.222

🇺🇸 209.50.173.174

🇺🇸 195.184.76.176

🇧🇴 190.129.22.22

🇳🇱 146.103.54.84

🇺🇸 104.196.145.203

🇺🇸 72.239.130.197

🇱🇹 62.60.130.242

🇷🇴 2.57.121.25

🇭🇰 202.155.236.242

🇧🇪 198.235.24.247

🇩🇴 191.97.106.92

🇦🇷 190.183.193.53

🇺🇸 153.75.82.135

🇺🇸 152.163.37.226

🇺🇸 148.59.129.118

🇨🇳 139.212.249.129

🇰🇪 105.164.128.26

🇺🇸 70.184.75.40

🇺🇸 65.75.210.1