JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.145.138

161.97.145.138 was found in our database!

This IP was reported 264 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2979988.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.145.138

Whois 161.97.145.138

IP Abuse Reports for 161.97.145.138:

This IP address has been reported a total of 264 times from 43 distinct sources. 161.97.145.138 was first reported on December 20th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2024-09-18 21:36:28 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-14 08:22:51 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.97.145.138 (vmi1129302.contaboserver.net): ... show more (mod_security) mod_security (id:210730) triggered by 161.97.145.138 (vmi1129302.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 14 04:22:47.578220 2024] [security2:error] [pid 8571:tid 8571] [client 161.97.145.138:48590] [client 161.97.145.138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bknj2.org\|F\|2"] [data ".keystoneprintingnj.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bknj2.org"] [uri "/andiamorun.com/www.keystoneprintingnj.com"] [unique_id "ZuVH18PhqLYG9fjvMOwFnwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-28 12:47:11 (1 year ago)	Excessive crawling/scraping	Hacking Brute-Force
🇳🇱 Roderic	2024-08-25 05:43:25 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/G ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/Germany/vmi1129302.contaboserver.net) show less	Bad Web Bot
🇳🇱 Roderic	2024-08-17 21:35:52 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/G ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/Germany/vmi1129302.contaboserver.net) show less	Bad Web Bot
🇦🇺 MAGIC	2024-08-17 02:06:26 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-08-13 00:23:48 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 161.97.145.138 (vmi1129302.contaboserver.net): ... show more (mod_security) mod_security (id:210730) triggered by 161.97.145.138 (vmi1129302.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 20:23:43.286677 2024] [security2:error] [pid 21710:tid 21710] [client 161.97.145.138:53866] [client 161.97.145.138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pamfilyataban.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pamfilyataban.com"] [uri "/mailto:[email protected]"] [unique_id "Zrqnj57QDiysQutwTuxaogAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2024-08-06 22:01:31 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇳🇱 Roderic	2024-08-03 02:14:30 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/G ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 161.97.145.138 (DE/Germany/vmi1129302.contaboserver.net) show less	Bad Web Bot
🇦🇺 MAGIC	2024-07-26 00:10:47 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 COMAITE	2024-07-25 14:59:38 (2 years ago)	Multiple web server 400 error codes from same source ip 161.97.145.138.	Web App Attack
🇸🇬 Charles	2024-07-22 05:14:57 (2 years ago)	161.97.145.138 - - [22/Jul/2024:13:14:56 +0800] "GET /robots.txt HTTP/1.1" 200 4394 "-" "Mozilla/5.0 ... show more 161.97.145.138 - - [22/Jul/2024:13:14:56 +0800] "GET /robots.txt HTTP/1.1" 200 4394 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:39:53 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇫🇷 francoisunix	2024-06-28 22:35:54 (2 years ago)	161.97.145.138 - - [28/Jun/2024:22:24:08 +0000] "GET /wp-content/uploads/cache/2010/08/IDC-smartphon ... show more 161.97.145.138 - - [28/Jun/2024:22:24:08 +0000] "GET /wp-content/uploads/cache/2010/08/IDC-smartphone-part-de-march%C3%A9-Q2-2011/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "161.97.145.138" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.000 ua="-" us="-" ut="-" ul="-" cs=- 161.97.145.138 - - [28/Jun/2024:22:28:10 +0000] "GET /wp-content/uploads/cache/2010/08/idc-evolution-vente-smartphone-part-de-march%C3%A9-2009-2011/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "161.97.145.138" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.000 ua="-" us="-" ut="-" ul="-" cs=- 161.97.145.138 - - [28/Jun/2024:22:33:40 +0000] "GET /wp-content/uploads/cache/2012/10/d%C3%A9composition_iphone_asymco/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "161.97.145.138" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.000 ua="-" us="-" ut="-" ul="-" cs=- show less	Web App Attack
🇺🇸 bigscoots.com	2024-06-18 07:01:27 (2 years ago)	(PERMBLOCK) 161.97.145.138 (DE/Germany/vmi1129302.contaboserver.net) has had more than 4 temp blocks ... show more (PERMBLOCK) 161.97.145.138 (DE/Germany/vmi1129302.contaboserver.net) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH

Showing 1 to 15 of 264 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.251

🇻🇪 190.6.32.107

🇬🇧 188.240.59.4

🇨🇴 181.78.22.108

🇧🇷 179.211.96.162

🇫🇷 169.58.152.86

🇸🇬 165.245.189.184

🇨🇳 112.26.101.76

🇭🇰 45.114.125.22

🇩🇪 8.209.77.162

🇱🇹 213.176.26.72

🇦🇷 209.61.5.18

🇹🇼 198.235.24.35

🇬🇧 194.50.235.140

🇪🇨 181.78.243.169

🇿🇦 165.16.187.185

🇺🇸 162.216.149.125

🇸🇪 79.136.18.51

🇱🇹 77.90.185.20

🇺🇸 64.112.56.122