161.97.104.25

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
90 reports
82 reporters · latest 7 months ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi3378539.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

161.97.104.25 has been reported 90 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
90 from 82 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 CalmBrain
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack Bad Web Bot
🇩🇪 Alfafoxtrot
Reason: suspicious | src-ip: 161.97.104.25 | dport=80,443 | Protoc.=TCP | Inc. 2d: 2
Hacking
🇮🇹 Pengu
Intrusion detection alert triggered by MSSP SOC
Port Scan Hacking
🇩🇪 Alfafoxtrot
Reason: suspicious | src-ip: 161.97.104.25 | dport=80,443 | Protoc.=TCP | Inc. 2d: 2
Hacking
🇩🇪 Hugopvigo
"2026-03-16 21:38:18+00:00 161.97.104.25 IP con score alto (100) detectada en el log."
Brute-Force SSH
Anonymous
Fail2ban Nginx log integration.
Brute-Force SSH Port Scan
🇨🇦 polycoda
📡 Port scan
Hacking Web App Attack
🇫🇷 Pythagus
Aggressive web scan
SQL Injection Bad Web Bot Web App Attack
🇧🇷 SOC-BR
Attack detected by Fortinet - applications3: Masscan.Scanner - 2026-03-15 02:36:31 - Source Port 61001
Port Scan Hacking
🇳🇱 f14driver
...
Brute-Force SSH Port Scan Web App Attack
Anonymous
Portscan: TCP/443 (12x), TCP/5038 (29x), TCP/80 (16x)
Port Scan
🇳🇱 NSCA-ISEU
Masscan Port Scanner. VT: Malicious: 5 - Suspicious: 6. AS51167 Contabo GmbH. Org: Contabo GmbH
Web App Attack Port Scan
🇬🇧 myintarweb
161.97.104.25 - - [16/Mar/2026:05:32:11 +0000] 443 "GET / HTTP/1.0" 400 1671 "-" "-" ...
Hacking Bad Web Bot Web App Attack
🇨🇭 GAS
Bad Bot. 161.97.104.25 - - [16/Mar/2026:06:32:04 +0100] "GET / HTTP/1.0" 402 2700 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" "-" "" ...
Bad Web Bot Web App Attack
🇩🇪 Progetto1
Detected via HAProxyScanner at 2026-03-16 05:32:02 UTC on destination port WEB (80/443). Repeated scan / connection.
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.82
🇺🇸 157.245.166.150
🇵🇰 153.117.33.152
🇧🇷 138.36.167.248
🇸🇬 85.203.21.213
🇸🇪 83.255.211.115
🇩🇪 37.221.198.47
🇬🇧 37.10.113.219
🇷🇺 109.194.108.203
🇺🇸 68.125.175.25
🇳🇱 45.148.10.151
🇺🇸 40.119.25.141
🇧🇪 34.78.85.62
🇧🇷 201.28.234.10
🇮🇹 172.213.26.234
🇻🇳 118.70.182.193
feedback