JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.168.142.80

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

16 reporters · latest 1 year ago

ISP	Hostwinds Seattle
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54290
Hostname(s)	hwsrv-1297814.hostwindsdns.com
Domain Name	hostwinds.com
Country	🇺🇸 United States of America
City	Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.168.142.80 has been reported 26 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.168.142.80

Export CSV

This IP address has been reported a total of 26 times from 16 distinct sources. 104.168.142.80 was first reported on October 12th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 abrsanz	2024-10-15 01:48:00 (1 year ago)	writing scripts, or spending hours editing?	Web Spam
🇺🇸 TPI-Abuse	2024-10-14 10:18:46 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 14 06:18:41.110997 2024] [security2:error] [pid 4638:tid 4638] [client 104.168.142.80:50476] [client 104.168.142.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|dibaplac.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "dibaplac.com"] [uri "/index-4.html"] [unique_id "ZwzwAfuDCv_e-guOC68z_AAAAAw"], referer: https://dibaplac.com/index-4.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-14 09:40:29 (1 year ago)	PSCDE WEBFORM SPAM 104.168.142.80 (client-104-168-142-80.hostwindsdns.com)	Web Spam
🇬🇧 gurnip	2024-10-14 09:24:13 (1 year ago)	Contact form spam of type 'other'.	Web Spam
🇺🇸 TPI-Abuse	2024-10-14 09:19:27 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 14 05:19:22.679239 2024] [security2:error] [pid 17679:tid 17692] [client 104.168.142.80:64250] [client 104.168.142.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|pecanvalleyestates.net\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "pecanvalleyestates.net"] [uri "/"] [unique_id "ZwziGvOErfZt2rye_fx1lgAAAAY"], referer: https://pecanvalleyestates.net/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-14 06:47:35 (1 year ago)	ALTB WEBFORM SPAM 104.168.142.80 (client-104-168-142-80.hostwindsdns.com)	Web Spam
🇺🇸 TPI-Abuse	2024-10-14 06:17:33 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 14 02:17:26.826593 2024] [security2:error] [pid 32505:tid 32505] [client 104.168.142.80:54926] [client 104.168.142.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|accu-tuner.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "accu-tuner.com"] [uri "/php/sendmail.php"] [unique_id "Zwy3dlPdlHLBSUtIvCVskwAAAAY"], referer: http://accu-tuner.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-14 06:17:27 (1 year ago)		Web Spam
🇫🇷 France Artisanat	2024-10-14 06:14:03 (1 year ago)	Hey, What if I told you that you could create ultra-realistic, high-definition 8K cinematic movie ... show more Hey, What if I told you that you could create ultra-realistic, high-definition 8K cinematic movies without hiring actors, writing scripts, or spending hours editing? And here’s the best part—you can easily upload your movies to major streaming platforms like Amazon Prime, Netflix, Disney+, and more for worldwide exposure! Earn dollars! Earn dollars : https://www.getprofitnow.info/aimoviemaker ! That’s exactly what Ai MovieMaker does for you—in less than 2 minutes! This revolutionary app allows you to: ï¿½ï¿½ Generate Entire Movies Instantly: Just enter your idea, and Ai MovieMaker handles the rest. Actors, dialogues, music, and even the script—all done for you! ï¿½ï¿½ No Technical Skills Required: Whether you’re a newbie or a seasoned pro, you can create mind-blowing 8K movies at the push of a button. ï¿½ï¿½ Ultra-Realistic 8K Quality: Your movies will have the crisp, professional look of Hollywood blockbusters, but you won&rsqu show less	Web Spam
Anonymous	2024-10-14 03:59:03 (1 year ago)	SPROVFR WEBFORM SPAM 104.168.142.80 (client-104-168-142-80.hostwindsdns.com)	Web Spam
🇪🇸 el-brujo	2024-10-14 00:58:30 (1 year ago)	14/Oct/2024:02:58:29.669823 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 14/Oct/2024:02:58:29.669823 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 104.168.142.80] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:l[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:your-subject. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: & more with a few clicks\\\\x0d\\\\x0a\\\\x0d\\\\x0aThe demand for AI-dr ... show less	Hacking Web App Attack
🇨🇦 Peter Chargen	2024-10-13 19:21:42 (1 year ago)	PHP email form abuse/SPAM attempt	Email Spam
🇸🇬 oncord	2024-10-13 14:53:42 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2024-10-13 13:56:18 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.142.80 (client-104-168-142-80.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 13 09:56:10.987679 2024] [security2:error] [pid 24585:tid 24585] [client 104.168.142.80:52047] [client 104.168.142.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|amoriotech.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "amoriotech.com"] [uri "/contact"] [unique_id "ZwvRevdQ6R41RF4QmWa7tgAAAAM"], referer: http://amoriotech.com/contact show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-13 08:48:27 (1 year ago)	APTUDE WEBFORM SPAM 104.168.142.80 (client-104-168-142-80.hostwindsdns.com)	Web Spam

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.166.78

🇺🇸 205.210.31.104

🇮🇹 185.15.171.7

🇩🇪 150.171.109.107

🇬🇧 149.248.78.237

🇺🇸 137.184.113.44

🇺🇸 100.29.192.65

🇬🇧 89.222.20.117

🇨🇳 42.51.41.252

🇮🇳 2405:201:5c0b:f1d9:8876:b462:3120:b048

🇧🇴 190.129.122.185

🇲🇩 188.244.23.36

🇺🇸 135.222.210.106

🇰🇷 134.185.120.220

🇷🇺 109.168.210.160

🇵🇱 92.118.205.11

🇪🇸 79.116.235.181

🇷🇺 77.91.65.80

🇷🇺 77.91.65.74

🇳🇱 64.225.72.42