JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.148.54

161.97.148.54

Neutral Activity

161 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

mail.lnservers.com

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

161.97.148.54 has been reported 161 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 161.97.148.54:

This IP address has been reported a total of 161 times from 74 distinct sources. 161.97.148.54 was first reported on August 27th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 deskpass.com	2024-09-28 00:45:21 (1 year ago)	GET /hehehehe.php	Web App Attack
🇫🇷 ✨	2024-09-28 00:37:01 (1 year ago)	Domain : tripoli-spain.org Rule : pluginsphp 2024-09-28 00:35:50 152.53.103.155 GET /wp-content/plug ... show more Domain : tripoli-spain.org Rule : pluginsphp 2024-09-28 00:35:50 152.53.103.155 GET /wp-content/plugins/pwnd/pwnd.php - 443 - 198.41.242.214 HTTP/2 Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 - www.tripoli-spain.org 404 0 2 113 499 71 - 161.97.148.54 show less	Web App Attack
🇬🇧 findlab	2024-09-27 18:00:02 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇩 Burayot	2024-09-27 17:12:05 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 161.97.148.54 (DE/Germany/vmi210678 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 161.97.148.54 (DE/Germany/vmi2106783.contaboserver.net): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2024-09-27 15:53:08 (1 year ago)	wordpress-trap	Web App Attack
🇺🇸 MHuiG	2024-09-27 10:09:19 (1 year ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 51167 clientAS ... show more The IP has triggered Cloudflare WAF. action: managed_challenge source: asn clientAsn: 51167 clientASNDescription: CONTABO clientCountryName: DE clientIP: 161.97.148.54 clientRequestHTTPHost: abuseipdb.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /wp-add.php clientRequestQuery: ?a=c datetime: 2024-09-27T08:42:00Z rayName: 8c9a32aacde87a5e ruleId: asn userAgent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇦🇺 advena	2024-09-27 07:30:56 (1 year ago)	161.97.148.54 (AS51167 CONTABO) was intercepted at 2024-09-27T07:22:31Z after violating WAF directiv ... show more 161.97.148.54 (AS51167 CONTABO) was intercepted at 2024-09-27T07:22:31Z after violating WAF directive: 0242110ae62e44028a13bf4834780914. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2024-09-26 20:56:55 (1 year ago)	wordpress-trap	Web App Attack
🇫🇷 conseilgouz	2024-09-26 19:35:04 (1 year ago)	sie-7 : Trying access unauthorized files/dir=>/wp-content/plugins/pwnd/pwnd.php	Hacking
🇺🇸 Psycho Solutions LLC	2024-09-26 17:21:03 (1 year ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/plugins/pwnd/pwnd.p ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/plugins/pwnd/pwnd.php - User Agent: N/A - Timestamp: 9/26/2024 5:21 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 /dev/null	2024-09-26 11:05:16 (1 year ago)	CMS Bruteforce / WebApp Attack attempt	Hacking Web App Attack
Anonymous	2024-09-26 01:48:25 (1 year ago)	wordpress-trap	Web App Attack
🇵🇱 sefinek.net	2024-09-26 00:40:52 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 51167 (CONTABO) Protocol ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 51167 (CONTABO) Protocol: HTTP/1.1 (method GET) Domain: sefinek.net Endpoint: /wp-add.php Query: ?a=c Timestamp: 2024-09-25T16:03:17Z Ray ID: 8c8c3e504d79cb2f Rule ID: 28ce88ae31c84d638aec7f360a4f64af UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
🇩🇪 eminovic.ba	2024-09-25 21:58:32 (1 year ago)	BRUTE FORCE: Excessive 404 hits ...	Hacking Brute-Force Web App Attack
🇳🇱 CryptoYakari	2024-09-25 20:50:21 (1 year ago)	161.97.148.54 - - [25/Sep/2024:23:47:53 +0300] "GET /hehehehe.php HTTP/1.0" 404 200 "-" "Mozlila/5.0 ... show more 161.97.148.54 - - [25/Sep/2024:23:47:53 +0300] "GET /hehehehe.php HTTP/1.0" 404 200 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.148.54 - - [25/Sep/2024:23:48:26 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.0" 404 3252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.148.54 - - [25/Sep/2024:23:49:03 +0300] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.0" 404 3252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.148.54 - - [25/Sep/2024:23:49:37 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.0" 404 3252 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/ ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.61

🇺🇸 184.105.247.210

🇭🇰 156.225.1.31

🇺🇸 147.185.132.55

🇷🇴 92.118.39.71

🇫🇷 91.231.89.239

🇬🇪 85.117.62.70

🇮🇳 4.240.96.30

🇷🇴 2.57.121.112

🇫🇷 2001:861:3c10:6980:f9fc:77d:5283:ea02

🇹🇼 220.133.95.63

🇺🇸 185.117.225.163

🇺🇸 184.105.247.199

🇫🇷 178.238.233.41

🇧🇷 177.103.186.170

🇮🇩 114.30.86.98

🇸🇪 83.191.179.185

🇩🇪 69.5.169.2

🇺🇸 64.62.156.224

🇨🇦 51.79.86.230