JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.104.180

161.97.104.180 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3079501.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.104.180

Whois 161.97.104.180

IP Abuse Reports for 161.97.104.180:

This IP address has been reported a total of 67 times from 31 distinct sources. 161.97.104.180 was first reported on October 2nd 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-09-01 15:30:49 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-26 13:56:47 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 09:56:42.277065 2024] [security2:error] [pid 4147441:tid 4147441] [client 161.97.104.180:21406] [client 161.97.104.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kelvinlouie.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kelvinlouie.com"] [uri "/0.bak"] [unique_id "ZsyJmhI6YiWRAP7oloQXYwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-22 23:30:42 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 19:30:37.724591 2024] [security2:error] [pid 32663:tid 32663] [client 161.97.104.180:51216] [client 161.97.104.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|copiersgreensboro.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "copiersgreensboro.com"] [uri "/php.bak"] [unique_id "ZsfKHVmL1xbvV-14Mx6iLQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-14 04:09:20 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 advena	2024-08-14 00:31:08 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:29:32Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:29:32Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-14 00:16:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:11:05Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:11:05Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-14 00:01:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:58:00Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:58:00Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:46:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:39:11Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:39:11Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:31:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:25:55Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:25:55Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:16:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:09:22Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:09:22Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:01:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:59:50Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:59:50Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 22:45:55 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:44:52Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:44:52Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 22:30:55 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:30:01Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:30:01Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2024-08-10 21:24:53 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-07 04:55:17 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:4e40:e020:0:27f:72a0:4bf9:95e9

🇪🇸 196.196.150.5

192.168.242.234

🇺🇸 172.203.234.251

🇹🇭 113.53.118.8

🇮🇪 108.131.48.144

🇷🇴 2.57.122.238

🇵🇪 201.218.157.181

🇳🇱 199.91.220.29

🇺🇸 195.184.76.209

🇷🇺 185.147.27.103

🇫🇷 176.170.132.54

🇺🇸 172.202.30.101

🇮🇳 172.69.203.25

172.18.57.16

172.16.109.130

🇨🇳 112.46.213.172

🇺🇸 107.174.174.17

🇰🇷 59.16.212.232

🇬🇧 45.133.173.215