AbuseIPDB » 142.11.216.121

Check an IP Address, Domain Name, or Subnet

e.g. 3.231.29.122, microsoft.com, or 5.188.10.0/24

142.11.216.121 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 65%: ?

65%

ISP	Hostwinds LLC.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	hwsrv-837055.hostwindsdns.com
Domain Name	hostwinds.com
Country	United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 142.11.216.121

Whois 142.11.216.121

IP Abuse Reports for 142.11.216.121:

This IP address has been reported a total of 12 times from 8 distinct sources. 142.11.216.121 was first reported on February 20th 2021, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
jethroparker	5 hours ago	2021-02-24T01:04:39+08:00 TCP 25 2021-02-24T01:04:40+08:00 TCP 25	Port Scan
Yasukuni	23 Feb 2021	Feb 24 02:14:58 ns1 postfix/smtpd\[26909\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\] ... show moreFeb 24 02:14:58 ns1 postfix/smtpd\[26909\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\]: SASL LOGIN authentication failed: authentication failure Feb 24 02:14:58 ns1 postfix/smtpd\[26911\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\]: SASL LOGIN authentication failed: authentication failure Feb 24 02:14:58 ns1 postfix/smtpd\[26912\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\]: SASL LOGIN authentication failed: authentication failure Feb 24 02:15:00 ns1 postfix/smtpd\[26909\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\]: SASL LOGIN authentication failed: authentication failure Feb 24 02:15:00 ns1 postfix/smtpd\[26911\]: warning: hwsrv-837055.hostwindsdns.com\[142.11.216.121\]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
raymarron.com	23 Feb 2021	GET /.env (x2)	Web App Attack
el-brujo	23 Feb 2021	23/Feb/2021:07:08:21 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 142.11. ... show more23/Feb/2021:07:08:21 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 142.11.216.121] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "140"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "elhacker.info"] [uri "/.env"] [unique_id "YDSb1dPTRSTKte6bxFMVhQAAAAI"] ... show less	Hacking Web App Attack
axllent	22 Feb 2021	Scanning for exploits - /.env	Web App Attack
HJ5Ss4Ju	22 Feb 2021	Forbidden directory scan :: 2021/02/22 23:31:32 [error] 38088#38088: 275641 access forbidden by rul ... show moreForbidden directory scan :: 2021/02/22 23:31:32 [error] 38088#38088: 275641 access forbidden by rule, client: 142.11.216.121, server: [censored_1], request: "GET /.env HTTP/1.1", host: "www.[censored_1]" show less	Hacking
raymarron.com	22 Feb 2021	GET /.env	Web App Attack
WebWizards.NZ	22 Feb 2021	Trolling for resource vulnerabilities	Web App Attack
raymarron.com	21 Feb 2021	GET /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php (x5) GET /vendor/phpuni ... show moreGET /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php (x5) GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (x10) show less	Web App Attack
vfinder	20 Feb 2021	Backdrop CMS module report: Request: /vendor/phpunit/phpunit/src/Util/PHP/eval-std...	Brute-Force Bad Web Bot Web App Attack
WebWizards.NZ	20 Feb 2021	Trolling for resource vulnerabilities	Web App Attack
axllent	20 Feb 2021	Scanning for exploits - /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web App Attack