JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.81.246

104.168.81.246 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	104-168-81-246-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.81.246

Whois 104.168.81.246

IP Abuse Reports for 104.168.81.246:

This IP address has been reported a total of 24 times from 19 distinct sources. 104.168.81.246 was first reported on July 26th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-07-27 23:00:12 (1 hour ago)	2026-07-28T06:00:09.417342 mail-honeypot postfix/submission/smtpd[15154]: warning: unknown[104.168.8 ... show more 2026-07-28T06:00:09.417342 mail-honeypot postfix/submission/smtpd[15154]: warning: unknown[104.168.81.246]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 [email protected]	2026-07-27 19:57:13 (4 hours ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-07-27T19:57:13Z	Brute-Force
🇮🇹 CoreTech srl	2026-07-27 18:37:33 (6 hours ago)	mail3-dc1 20:33:43.830 [105.157.29.216] SMTP Login failed: Incorrect password for user [diegogiudici ... show more mail3-dc1 20:33:43.830 [105.157.29.216] SMTP Login failed: Incorrect password for user [[email protected]]mail3-dc1 20:33:43.830 [105.157.29.216] SMTP Login failed: Invalid username ([email protected]) and password combination.is-6411d9d7 20:34:17.384 [104.168.81.246] SMTP Login failed: Domain [midifendo.it] not foundis-6411d9d7 20:34:17.384 [104.168.81.246] SMTP Login failed: That domain was not found. Double check your email address.is-6411d9d7 20:36:07.205 [117.99.12.121] SMTP Login failed: Domain [midifendo.it] not foundis-6411d9d7 20:36:07.205 [117.99.12.121] SMTP Login failed: That domain was not found. Double check your email address.is-65b7aeb8 20:37:06.556 [5.89.229.42] SMTP Login failed: Incorrect password for user [[email protected]]is-65b7aeb8 20:37:06.556 [5.89.229.42] SMTP Login failed: Invalid username ([email protected]) and password combination.mail3-dc1 20:37:13.652 [193.26.2.186] SMTP Login failed: Invalid username ([email protected]) and show less	Brute-Force
Anonymous	2026-07-27 18:36:03 (6 hours ago)	...	Brute-Force
🇮🇩 xveil	2026-07-27 18:25:50 (6 hours ago)	2026-07-28T01:25:48.294242 mail-honeypot postfix/submission/smtpd[9538]: warning: unknown[104.168.81 ... show more 2026-07-28T01:25:48.294242 mail-honeypot postfix/submission/smtpd[9538]: warning: unknown[104.168.81.246]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 SX Communications	2026-07-27 16:38:36 (8 hours ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 104.168.81.246: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 104.168.81.246: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇮🇩 xveil	2026-07-27 15:35:52 (9 hours ago)	2026-07-27T22:35:49.932699 mail-honeypot postfix/submission/smtpd[6485]: warning: unknown[104.168.81 ... show more 2026-07-27T22:35:49.932699 mail-honeypot postfix/submission/smtpd[6485]: warning: unknown[104.168.81.246]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 [email protected]	2026-07-27 15:32:09 (9 hours ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-07-27T15:32:09Z	Brute-Force
🇧🇪 voormedia	2026-07-27 15:27:59 (9 hours ago)	Accessed trap at '/.env'	Web App Attack
🇫🇷 dynamix	2026-07-27 14:38:42 (10 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 Inartis	2026-07-27 14:37:11 (10 hours ago)	2026-07-27T16:37:10.668474mail1.inartis.it postfix/smtpd[2794758]: warning: unknown[104.168.81.246]: ... show more 2026-07-27T16:37:10.668474mail1.inartis.it postfix/smtpd[2794758]: warning: unknown[104.168.81.246]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇬🇧 consul.to	2026-07-27 14:20:35 (10 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 [email protected]	2026-07-27 13:24:57 (11 hours ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-07-27T13:24:57Z	Brute-Force
🇪🇸 el-brujo	2026-07-27 12:58:11 (11 hours ago)	[Mon Jul 27 14:58:11.153341 2026] [proxy_fcgi:error] [pid 2007322:tid 2011432] [remote 104.168.81.24 ... show more [Mon Jul 27 14:58:11.153341 2026] [proxy_fcgi:error] [pid 2007322:tid 2011432] [remote 104.168.81.246:0] AH01071: Got error 'Primary script unknown\n' [Mon Jul 27 14:58:11.161250 2026] [proxy_fcgi:error] [pid 2007322:tid 2011545] [remote 104.168.81.246:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:31:17 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.168.81.246 (104-168-81-246-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 104.168.81.246 (104-168-81-246-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:31:10.800562 2026] [security2:error] [pid 237786:tid 237786] [client 104.168.81.246:52263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/.env.production"] [unique_id "amdPjmFzxErfSMkogZ0XGgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.61.176.110

🇧🇷 177.53.133.170

🇵🇱 176.53.159.198

🇺🇸 173.239.213.72

🇺🇸 158.51.96.38

🇵🇭 126.209.47.75

🇺🇸 107.175.93.210

🇻🇳 103.48.192.48

🇰🇷 211.40.207.138

🇺🇸 185.66.139.73

🇯🇴 176.29.56.193

🇧🇷 168.194.27.11

🇺🇸 162.216.150.108

🇰🇷 158.180.79.132

🇬🇧 157.245.34.56

🇮🇩 157.20.37.254

🇺🇸 152.32.207.197

🇺🇸 65.49.20.82

🇨🇳 39.96.72.77

🇺🇸 38.86.135.158