JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.234.52

104.168.234.52 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	Hostwinds Seattle
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54290
Hostname(s)	client-104-168-234-52.hostwindsdns.com
Domain Name	hostwinds.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.234.52

Whois 104.168.234.52

IP Abuse Reports for 104.168.234.52:

This IP address has been reported a total of 25 times from 17 distinct sources. 104.168.234.52 was first reported on August 31st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2024-09-02 10:04:17 (1 year ago)	02/Sep/2024:12:04:16.967511 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 02/Sep/2024:12:04:16.967511 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 104.168.234.52] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:your-subject. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id "932110"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: \\\\x0d\\\\x0aConvert found within ARGS:your-subject: Hello hostench.eu,\\\\x0d\\\\x0a\ ... show less	Hacking Web App Attack
🇨🇦 Peter Chargen	2024-09-02 09:08:22 (1 year ago)	PHP email form abuse/SPAM attempt	Email Spam
🇺🇸 TPI-Abuse	2024-09-02 07:46:31 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 02 03:46:26.580952 2024] [security2:error] [pid 31857:tid 31857] [client 104.168.234.52:62872] [client 104.168.234.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|jamesallenwalker.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "jamesallenwalker.com"] [uri "/contact.html"] [unique_id "ZtVtUog7hV99L1grnJd3eQAAAAs"], referer: http://jamesallenwalker.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-02 06:30:29 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 02 02:30:22.982644 2024] [security2:error] [pid 4572:tid 4572] [client 104.168.234.52:58122] [client 104.168.234.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|johnprimerano.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "johnprimerano.com"] [uri "/contact.html"] [unique_id "ZtVbfiuIpcmFsCJOAv2C7wAAAA4"], referer: http://johnprimerano.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 getaccessibleapps.com	2024-09-02 05:55:01 (1 year ago)		Web Spam
🇺🇸 jmraupe	2024-09-02 05:14:00 (1 year ago)	Form spam, scripted hacking attempt through form	Email Spam Hacking
🇺🇸 TPI-Abuse	2024-09-02 03:12:14 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 23:12:08.252444 2024] [security2:error] [pid 3549477:tid 3549477] [client 104.168.234.52:53562] [client 104.168.234.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|aurumprivatecapital.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "aurumprivatecapital.com"] [uri "/contact.html"] [unique_id "ZtUtCOBs4S0My_b5wFMHrwAAAAA"], referer: http://aurumprivatecapital.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 abrsanz	2024-09-02 03:02:00 (1 year ago)	images, tweak, and done	Web Spam
🇺🇸 jmraupe	2024-09-02 01:33:00 (1 year ago)	Form spam, scripted hacking attempt against form	Email Spam Hacking
🇺🇸 TPI-Abuse	2024-09-02 01:08:17 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwinds ... show more (mod_security) mod_security (id:217280) triggered by 104.168.234.52 (client-104-168-234-52.hostwindsdns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 21:08:12.641844 2024] [security2:error] [pid 29428:tid 29445] [client 104.168.234.52:62300] [client 104.168.234.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.howlerrock.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.howlerrock.com"] [uri "/contact/"] [unique_id "ZtUP_IuQuEfhn3L6tzYVsAAAAM8"], referer: https://www.howlerrock.com/contact/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-02 00:00:47 (1 year ago)	APTUDE WEBFORM SPAM 104.168.234.52 (client-104-168-234-52.hostwindsdns.com)	Web Spam
🇧🇪 Ivo Vynckier	2024-09-01 15:26:00 (1 year ago)	104.168.234.52 - mailto [31/Aug/2024:18:47:10 +0200] "POST /?subject=Feedback%20Web%20Site%20'How%20 ... show more 104.168.234.52 - mailto [31/Aug/2024:18:47:10 +0200] "POST /?subject=Feedback%20Web%20Site%20'How%20OCR%20Works' HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 104.168.234.52 - - [31/Aug/2024:18:47:10 +0200] "GET /?subject=Feedback%20Web%20Site%20'How%20OCR%20Works' HTTP/1.1" 200 3511 "mailto:[email protected]?subject=Feedback%20Web%20Site%20'How%20OCR%20Works'" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" show less	Email Spam
Anonymous	2024-09-01 15:02:22 (1 year ago)		Web Spam
🇸🇬 oncord	2024-09-01 14:22:59 (1 year ago)	Form spam	Web Spam
🇨🇭 hc	2024-09-01 14:20:00 (1 year ago)	Frau Marvin Fulmer 26 Rue Des Lieutemants Thomazo Douai 03.74.49.73.53 [email protected] ... show more Frau Marvin Fulmer 26 Rue Des Lieutemants Thomazo Douai 03.74.49.73.53 [email protected] 2D & 3D Animation, Explainer, Doodle Sketch, Shorts & Motion Videos are the most relevant profitable way to generate money online. Now, you may be making them as an online marketer or creating them as a freelancer. This moment right now is the biggest opportunity I’ve seen in a very long time to start earning and growing an online income with video, or to make money from selling videos and video services to clients. Today, I want to introduce to you Explaindio - the world’s easiest to use video creator that features all the tools you need to create 2D & 3D Animation show less	Web Spam

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.62.37.106

🇳🇱 176.65.148.125

🇨🇳 171.80.189.90

🇷🇴 151.242.30.210

🇺🇸 147.185.132.18

🇫🇮 74.125.46.154

🇳🇱 195.178.110.228

🇦🇴 193.163.125.93

🇺🇸 170.106.105.73

🇫🇷 163.172.157.54

🇲🇦 154.144.225.226

🇨🇦 85.217.149.62

🇺🇸 66.132.172.196

🇺🇸 64.202.186.161

🇺🇸 47.89.154.16

🇨🇳 45.126.120.53

🇮🇳 223.30.56.197

🇨🇾 213.7.61.148

🇧🇪 198.235.24.221

🇷🇸 178.221.168.142