JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.142.71

104.168.142.71 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Hostwinds Seattle
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54290
Hostname(s)	client-104-168-142-71.hostwindsdns.com
Domain Name	hostwinds.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.142.71

Whois 104.168.142.71

IP Abuse Reports for 104.168.142.71:

This IP address has been reported a total of 15 times from 11 distinct sources. 104.168.142.71 was first reported on October 31st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 abrsanz	2024-11-02 13:50:00 (1 year ago)	videos, and sales copy at	Web Spam
Anonymous	2024-11-01 06:55:57 (1 year ago)		Web Spam
🇩🇪 LRob	2024-11-01 06:45:03 (1 year ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2024-11-01 05:07:43 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 01 01:07:38.169582 2024] [security2:error] [pid 10809:tid 10809] [client 104.168.142.71:53580] [client 104.168.142.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|dibaplac.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "dibaplac.com"] [uri "/index-4.html"] [unique_id "ZyRiGh6--nREgOF9GpHRBwAAAA4"], referer: https://dibaplac.com/index-4.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-01 03:41:31 (1 year ago)	PSCDE WEBFORM SPAM 104.168.142.71 (client-104-168-142-71.hostwindsdns.com)	Web Spam
🇬🇧 gurnip	2024-11-01 03:20:46 (1 year ago)	Contact form spam of type 'other'.	Web Spam
🇺🇸 TPI-Abuse	2024-11-01 02:42:08 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 31 22:42:04.706336 2024] [security2:error] [pid 20396:tid 20396] [client 104.168.142.71:51235] [client 104.168.142.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|accu-tuner.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "accu-tuner.com"] [uri "/php/sendmail.php"] [unique_id "ZyQ__CMVW0EKB2MidfcRbwAAAAA"], referer: http://accu-tuner.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 France Artisanat	2024-11-01 02:33:16 (1 year ago)	Hey, Imagine accessing the world’s leading AI platforms—ChatGPT 4, Gemini Pro, DALL&m ... show more Hey, Imagine accessing the world’s leading AI platforms—ChatGPT 4, Gemini Pro, DALL·E 3, Leonardo AI, Microsoft Copilot Pro, Meta Llama 3, Stable Diffusion XL, and PaLM 2—all from a single dashboard without paying any monthly fees. Welcome to One AI: https://www.getmoreopportunities.info/aitools ! Artificial intelligence is transforming the way businesses operate, offering incredible capabilities like AI-generated images, videos, and sales copy at lightning speed. But accessing these powerful tools often comes with a hefty price tag. Consider this: ChatGPT 4: 9/month Gemini Pro: 3/month DALL·E 3: 9/month Leonardo AI: 4/month Microsoft Copilot Pro: 9/month Meta Llama 3: 5/month Stable Diffusion XL: 9/month PaLM 2: 7/month That's a staggering 2,717 annually just to keep up with the AI revolution. But what if there was a better way? Introducing One AI: All-in-One Platform: Access all top-tier AI apps f show less	Web Spam
Anonymous	2024-11-01 02:10:31 (1 year ago)	ALTB WEBFORM SPAM 104.168.142.71 (client-104-168-142-71.hostwindsdns.com)	Web Spam
🇿🇦 maximonline.co.za	2024-11-01 01:07:11 (1 year ago)	Contact form spam.	Web Spam
🇺🇸 TPI-Abuse	2024-11-01 00:33:27 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.71 (client-104-168-142-71.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 31 20:33:21.148073 2024] [security2:error] [pid 12590:tid 12855] [client 104.168.142.71:57847] [client 104.168.142.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.chelseyrae.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chelseyrae.com"] [uri "/contact-me/"] [unique_id "ZyQh0Zu8ffPGcdAbiAVEIAAAARM"], referer: http://www.chelseyrae.com/contact-me/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-31 16:06:32 (1 year ago)	SPROVFR WEBFORM SPAM 104.168.142.71 (client-104-168-142-71.hostwindsdns.com)	Web Spam
🇪🇸 el-brujo	2024-10-31 15:21:06 (1 year ago)	31/Oct/2024:16:21:05.963609 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 31/Oct/2024:16:21:05.963609 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 104.168.142.71] ModSecurity: Rule 55aca5568140 [id "932140"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "413"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.hostench.eu"] [uri "/wp-json/contact-form-7/v1/contact-forms/296/feedback"] [unique_id "ZyOgYWBf56Xgo7hwdqNKKQADWzs"] ... show less	Hacking Web App Attack
🇸🇬 oncord	2024-10-31 12:58:32 (1 year ago)	Form spam	Web Spam
🇨🇭 backslash	2024-10-31 12:45:04 (1 year ago)		Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.127

🇲🇽 189.171.119.97

🇺🇸 173.252.107.33

🇮🇩 163.61.134.228

🇹🇼 128.14.229.76

🇨🇳 120.83.111.70

🇪🇪 95.85.245.227

🇸🇬 45.78.235.121

🇺🇦 31.31.123.133

🇸🇬 212.73.148.9

🇲🇽 187.190.187.110

🇳🇱 172.94.9.50

🇺🇸 139.144.239.185

🇸🇬 138.75.105.42

🇧🇩 103.168.8.122

🇳🇱 78.142.18.40

🇺🇸 66.132.172.231

🇰🇷 59.8.56.15

🇸🇬 47.128.61.223

🇧🇷 45.205.1.133