JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.8.161

104.168.8.161 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 0%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.8.161

Whois 104.168.8.161

IP Abuse Reports for 104.168.8.161:

This IP address has been reported a total of 3 times from 3 distinct sources. 104.168.8.161 was first reported on July 25th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-22 10:54:50 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 104.168.8.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 104.168.8.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 05:54:46.991503 2026] [security2:error] [pid 21571:tid 21571] [client 104.168.8.161:33435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rocksolidhomebuilders.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rocksolidhomebuilders.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIB9sotox_6Os8yecDxoAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ne1for23	2025-12-20 00:37:15 (5 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 104.168.8.161 - - [20/Dec/2025:00:37:15 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇺🇸 FireballDWF	2025-07-25 08:15:04 (10 months ago)	404 NOT FOUND	Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.105.98.252

🇳🇱 45.142.3.73

🇺🇸 45.38.16.218

🇵🇱 143.20.97.215

🇭🇰 101.36.124.127

🇮🇹 93.92.79.164

🇷🇴 92.118.39.62

🇳🇱 91.92.42.245

🇷🇺 87.242.123.79

🇳🇱 2a13:adc0::2db:cfff:fe2b:2b8a

🇩🇪 213.209.159.56

🇻🇳 103.167.89.222

🇵🇪 200.37.179.83

🇨🇳 121.199.172.227

🇨🇳 101.96.203.31

🇫🇮 86.38.238.75

🇱🇹 81.30.98.44

🇺🇸 76.79.213.70

🇺🇸 66.132.195.108

🇩🇪 54.93.203.82