JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.104.180

161.97.104.180 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3079501.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.104.180

Whois 161.97.104.180

IP Abuse Reports for 161.97.104.180:

This IP address has been reported a total of 67 times from 31 distinct sources. 161.97.104.180 was first reported on October 2nd 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-09-01 15:30:49 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-26 13:56:47 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 09:56:42.277065 2024] [security2:error] [pid 4147441:tid 4147441] [client 161.97.104.180:21406] [client 161.97.104.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kelvinlouie.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kelvinlouie.com"] [uri "/0.bak"] [unique_id "ZsyJmhI6YiWRAP7oloQXYwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-22 23:30:42 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 161.97.104.180 (earthbase.hhost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 19:30:37.724591 2024] [security2:error] [pid 32663:tid 32663] [client 161.97.104.180:51216] [client 161.97.104.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|copiersgreensboro.com\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "copiersgreensboro.com"] [uri "/php.bak"] [unique_id "ZsfKHVmL1xbvV-14Mx6iLQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-14 04:09:20 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 advena	2024-08-14 00:31:08 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:29:32Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:29:32Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-14 00:16:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:11:05Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-14T00:11:05Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-14 00:01:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:58:00Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:58:00Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:46:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:39:11Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:39:11Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:31:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:25:55Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:25:55Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:16:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:09:22Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T23:09:22Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 23:01:07 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:59:50Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:59:50Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 22:45:55 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:44:52Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:44:52Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2024-08-13 22:30:55 (1 year ago)	161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:30:01Z after violating WAF directi ... show more 161.97.104.180 (AS51167 CONTABO) was intercepted at 2024-08-13T22:30:01Z after violating WAF directive: ce11be543594412bb4bb92516aa0bef8. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2024-08-10 21:24:53 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-07 04:55:17 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 77.83.39.42

🇦🇴 193.163.125.172

🇵🇱 172.253.13.222

🇧🇷 172.84.178.34

🇮🇳 172.83.83.194

🇩🇪 167.94.146.38

🇨🇦 85.217.149.15

🇩🇪 69.5.169.142

🇭🇰 47.86.15.20

🇳🇱 45.148.10.152

🇸🇬 43.172.195.244

🇮🇳 35.207.202.141

🇳🇱 20.229.115.183

🇨🇳 8.163.93.133

🇨🇳 219.153.113.99

🇩🇪 213.209.159.242

🇩🇪 213.209.159.238

🇩🇪 213.209.159.26

🇬🇧 213.166.84.51

🇬🇷 212.251.0.147