JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.135.216

104.168.135.216 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	Hostwinds Seattle
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54290
Hostname(s)	hwsrv-1333066.hostwindsdns.com
Domain Name	hostwinds.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.135.216

Whois 104.168.135.216

IP Abuse Reports for 104.168.135.216:

This IP address has been reported a total of 33 times from 21 distinct sources. 104.168.135.216 was first reported on April 10th 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-24 13:27:43 (9 months ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇸🇰 EVISION	2025-05-05 06:05:00 (1 year ago)	[email protected]	Phishing Email Spam Spoofing
Anonymous	2025-04-10 08:50:24 (1 year ago)	ALTB WEBFORM SPAM 104.168.135.216 (client-104-168-135-216.hostwindsdns.com)	Web Spam
Anonymous	2025-04-10 06:06:54 (1 year ago)		Web Spam
🇳🇱 MacLotsen	2025-04-10 05:42:42 (1 year ago)	Violated robots.txt	Web Spam
Anonymous	2025-04-10 05:10:05 (1 year ago)	SPARSDE WEBFORM SPAM 104.168.135.216 (client-104-168-135-216.hostwindsdns.com)	Web Spam
Anonymous	2025-04-10 03:25:03 (1 year ago)	LOKWIDE WEBFORM SPAM 104.168.135.216 (client-104-168-135-216.hostwindsdns.com)	Web Spam
🇿🇦 maximonline.co.za	2025-04-10 03:17:08 (1 year ago)	Contact form spam.	Web Spam
🇺🇸 TPI-Abuse	2025-04-10 02:10:37 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwin ... show more (mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 22:10:32.361260 2025] [security2:error] [pid 3566090:tid 3566090] [client 104.168.135.216:56966] [client 104.168.135.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|jobseekersvideonetwork.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "jobseekersvideonetwork.com"] [uri "/contact.php"] [unique_id "Z_comBRRN298yrv3-AOZCgAAAAM"], referer: http://jobseekersvideonetwork.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-10 01:05:57 (1 year ago)	DEAGICO WEBFORM SPAM 104.168.135.216 (client-104-168-135-216.hostwindsdns.com)	Web Spam
🇨🇭 backslash	2025-04-10 00:05:06 (1 year ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇬🇧 gurnip	2025-04-09 23:41:50 (1 year ago)	Contact form spam of type 'other'.	Web Spam
Anonymous	2025-04-09 23:10:41 (1 year ago)	FPROCO WEBFORM SPAM 104.168.135.216 (client-104-168-135-216.hostwindsdns.com)	Web Spam
🇺🇸 TPI-Abuse	2025-04-09 22:43:22 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwin ... show more (mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 18:43:15.898369 2025] [security2:error] [pid 19471:tid 19471] [client 104.168.135.216:49165] [client 104.168.135.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|mathewsdental.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "mathewsdental.com"] [uri "/index.php/contact-bottom"] [unique_id "Z_b4A8eOxoMYRhdPXpiK0QAAAAg"], referer: http://mathewsdental.com/index.php/contact-bottom show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-09 21:40:53 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwin ... show more (mod_security) mod_security (id:217280) triggered by 104.168.135.216 (client-104-168-135-216.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 17:40:49.648327 2025] [security2:error] [pid 2283972:tid 2283972] [client 104.168.135.216:51829] [client 104.168.135.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|nypdkids.org\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nypdkids.org"] [uri "/php/send_email.php"] [unique_id "Z_bpYTcJYxw8Ey0nC1ZlpwAAAAE"], referer: http://nypdkids.org/contact-donate-nypd-kids.html show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.86.210

🇩🇪 34.159.18.221

🇳🇱 185.93.89.36

🇦🇷 181.164.12.188

🇺🇸 143.198.68.20

🇱🇹 77.90.185.20

🇩🇪 69.5.169.178

🇧🇷 45.236.85.34

🇮🇳 43.241.145.60

🇸🇳 213.154.80.51

🇮🇩 182.13.96.107

🇮🇹 172.213.144.209

🇫🇮 147.185.133.146

🇷🇺 95.165.142.8

🇨🇳 59.110.28.60

🇳🇱 45.148.10.152

🇰🇷 222.110.147.56

🇮🇳 171.61.25.141

🇧🇷 170.247.146.138

🇫🇮 147.185.133.243