JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.97.95.234

161.97.95.234 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 89%: ?

89%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2985573.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.97.95.234

Whois 161.97.95.234

IP Abuse Reports for 161.97.95.234:

This IP address has been reported a total of 29 times from 18 distinct sources. 161.97.95.234 was first reported on September 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hugopvigo	2026-09-16 20:47:27 (1 day ago)	"2026-09-16 20:47:27+00:00 161.97.95.234 IP con score alto (91) detectada en el log."	Brute-Force SSH
🇩🇪 Hugopvigo	2026-09-16 07:26:21 (1 day ago)	161.97.95.234 - - [16/Sep/2026:09:26:19 +0200] "GET /site/wp-login.php HTTP/1.1" 404 120323 "-" "Moz ... show more 161.97.95.234 - - [16/Sep/2026:09:26:19 +0200] "GET /site/wp-login.php HTTP/1.1" 404 120323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 161.97.95.234 - - [16/Sep/2026:09:26:19 +0200] "GET /wp/wp-login.php HTTP/1.1" 404 127539 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 161.97.95.234 - - [16/Sep/2026:09:26:19 +0200] "GET /wordpress/wp-login.php HTTP/1.1" 404 127485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" ... show less	Hacking Brute-Force Web App Attack SSH
Anonymous	2026-09-16 06:44:08 (1 day ago)	[Wed Sep 16 08:44:07.928245 2026] [access_compat:error] [pid 591889:tid 123430565304000] [client 161 ... show more [Wed Sep 16 08:44:07.928245 2026] [access_compat:error] [pid 591889:tid 123430565304000] [client 161.97.95.234:38574] AH01797: client denied by server configuration: /var/www/html/wp [Wed Sep 16 08:44:07.932445 2026] [access_compat:error] [pid 580026:tid 123431102174912] [client 161.97.95.234:38558] AH01797: client denied by server configuration: /var/www/html/wp-login.php [Wed Sep 16 08:44:07.939452 2026] [access_compat:error] [pid 580025:tid 123431110567616] [client 161.97.95.234:38590] AH01797: client denied by server configuration: /var/www/html/wordpress [Wed Sep 16 08:44:07.939751 2026] [access_compat:error] [pid 591889:tid 123431085389504] [client 161.97.95.234:38574] AH01797: client denied by server configuration: /var/www/html/site [Wed Sep 16 08:44:07.943187 2026] [access_compat:error] [pid 580026:tid 123431110567616] [client 161.97.95.234:38558] AH01797: client denied by server configuration: /var/www/html/cms [Wed Sep 16 08:44:07.950708 2026] [access_compat:error] [pid 5800 ... show less	Brute-Force Web App Attack
Anonymous	2026-09-16 06:17:03 (1 day ago)	SSH brute force detected by CrowdSec	Brute-Force
🇩🇪 palzer.IT	2026-09-16 03:10:33 (1 day ago)	Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [16/Sep/2026:05:10:13 +0200] POST / ... show more Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [16/Sep/2026:05:10:13 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 palzer.IT	2026-09-16 00:26:28 (1 day ago)	Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [16/Sep/2026:02:16:12 +0200] POST / ... show more Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [16/Sep/2026:02:16:12 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 161.97.95.234 - - [16/Sep/2026:02:26:08 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-09-16 00:09:13 (1 day ago)	(PERMBLOCK) 161.97.95.234 (DE/Germany/vmi2985573.contaboserver.net) has had more than 4 temp blocks ... show more (PERMBLOCK) 161.97.95.234 (DE/Germany/vmi2985573.contaboserver.net) has had more than 4 temp blocks in the last 86400 secs (0-122) show less	Hacking
🇩🇪 palzer.IT	2026-09-15 17:58:42 (2 days ago)	Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [15/Sep/2026:19:45:40 +0200] POST / ... show more Fail2ban automatic report for plesk-wordpress: 161.97.95.234 - - [15/Sep/2026:19:45:40 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 161.97.95.234 - - [15/Sep/2026:19:52:10 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 161.97.95.234 - - [15/Sep/2026:19:58:23 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 17049 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-15 16:53:23 (2 days ago)	[TueSep1518:53:17.4902582026][security2:error][pid1750296:tid1750400][client161.97.95.234:0]ModSecur ... show more [TueSep1518:53:17.4902582026][security2:error][pid1750296:tid1750400][client161.97.95.234:0]ModSecurity:Accessdeniedwithcode429\(phase2\).OperatorGTmatched14atIP:login_counter.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"591\"][id\"1002002\"][msg\"Toomanyloginattempts\"][hostname\"allegrafamiglia.ch\"][uri\"/wp-login.php\"][unique_id\"aql3_eX8snOWJ4Z-zALmQQAAAMw\"]\,referer:https://allegrafamiglia.ch/wp-login.php show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-15 09:46:22 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇵🇱 gandaflux	2026-09-15 09:46:21 (2 days ago)	161.97.95.234 [redacted-domain] - [15/Sep/2026:10:27:52 +0200] "POST /wp-login.php HTTP/1.1" 403 158 ... show more 161.97.95.234 [redacted-domain] - [15/Sep/2026:10:27:52 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 161.97.95.234 [redacted-domain] - [15/Sep/2026:10:45:53 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 161.97.95.234 [redacted-domain] - [15/Sep/2026:10:57:25 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 161.97.95.234 [redacted-domain] - [15/Sep/2026:11:07:49 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-15 09:10:21 (2 days ago)	(PERMBLOCK) 161.97.95.234 (DE/Germany/vmi2985573.contaboserver.net) has had more than 4 temp blocks ... show more (PERMBLOCK) 161.97.95.234 (DE/Germany/vmi2985573.contaboserver.net) has had more than 4 temp blocks in the last 86400 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-09-15 07:18:34 (2 days ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
Anonymous	2026-09-15 07:14:55 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-09-15 07:13:00 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST (+1 mor ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST (+1 more) \| path: /xmlrpc.php (+1 more) \| query: author=1 (+5 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 \| 2026-09-15 07:13 UTC show less	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 210.79.142.201

🇺🇸 174.138.82.60

🇺🇸 162.216.150.203

🇺🇸 64.62.197.19

🇬🇧 46.101.9.55

🇺🇸 2001:4860:4860::8888

🇨🇳 223.4.205.118

🇳🇱 194.33.47.25

🇩🇪 172.236.209.227

🇳🇱 167.99.210.137

🇨🇦 104.253.212.60

🇸🇬 104.43.56.65

🇳🇱 77.239.124.121

🇺🇸 20.46.234.109

🇰🇷 175.212.144.221

🇺🇸 167.71.175.236

🇸🇬 136.85.89.159

🇺🇸 135.222.210.116

🇹🇭 49.48.91.52

🇳🇱 45.148.10.151