JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.44.218.103

142.44.218.103 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 16%: ?

16%

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	14244218103.writeimprover.com
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.44.218.103

Whois 142.44.218.103

IP Abuse Reports for 142.44.218.103:

This IP address has been reported a total of 26 times from 10 distinct sources. 142.44.218.103 was first reported on August 16th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-16 19:52:37 (1 day ago)	NOQUEUE - IP: 142.44.218.103 - Jul 16 21:52:37 plesk postfix/smtpd[3158731]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.218.103 - Jul 16 21:52:37 plesk postfix/smtpd[3158731]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 733.1. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇨🇭 Origon	2026-07-11 23:27:37 (5 days ago)	NOQUEUE - IP: 142.44.218.103 - Jul 12 01:27:37 plesk postfix/smtpd[3645760]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.218.103 - Jul 12 01:27:37 plesk postfix/smtpd[3645760]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-1.uceprotect.net; IP 142.44.218.103 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇨🇭 Origon	2026-07-06 06:29:03 (1 week ago)	NOQUEUE - IP: 142.44.218.103 - Jul 6 08:29:03 plesk postfix/smtpd[187807]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 142.44.218.103 - Jul 6 08:29:03 plesk postfix/smtpd[187807]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 559.1. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇨🇭 Origon	2026-06-20 12:24:10 (3 weeks ago)	NOQUEUE - IP: 142.44.218.103 - Jun 20 14:24:10 plesk postfix/smtpd[2359303]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.218.103 - Jun 20 14:24:10 plesk postfix/smtpd[2359303]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-1.uceprotect.net; IP 142.44.218.103 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇪🇸 didevi	2026-06-16 20:38:40 (1 month ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇵🇱 TheWojtek	2026-06-01 11:54:16 (1 month ago)	Jun 1 13:54:15 hq postfix/smtpd[2031775]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[ ... show more Jun 1 13:54:15 hq postfix/smtpd[2031775]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using Guardian Mail; https://lookup.abusix.com/search?q=142.44.218.103; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<14244218103.writeimprover.com> ... show less	Email Spam
Anonymous	2026-05-05 14:18:41 (2 months ago)	spamd: identified spam	Email Spam
🇨🇭 Origon	2026-04-30 17:47:57 (2 months ago)	NOQUEUE - IP: 142.44.218.103 - Apr 30 19:47:57 plesk postfix/smtpd[1116492]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.218.103 - Apr 30 19:47:57 plesk postfix/smtpd[1116492]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 202. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇨🇭 Origon	2026-04-13 13:06:15 (3 months ago)	NOQUEUE - IP: 142.44.218.103 - Apr 13 15:06:15 plesk postfix/smtpd[1731073]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.218.103 - Apr 13 15:06:15 plesk postfix/smtpd[1731073]: NOQUEUE: reject: RCPT from 14244218103.writeimprover.com[142.44.218.103]: 554 5.7.1 Service unavailable; Client host [142.44.218.103] blocked using dnsbl-1.uceprotect.net; IP 142.44.218.103 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=142.44.218.103; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244218103.writeimprover.com> show less	Email Spam
🇩🇪 H. Hampel	2026-02-05 18:39:36 (5 months ago)	SMTP hacking.	Email Spam Hacking Spoofing
🇺🇸 DiodeDave	2025-12-24 07:58:39 (6 months ago)	Attempted access after blacklisting	Email Spam
🇺🇸 TPI-Abuse	2025-11-01 19:05:57 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): ... show more (mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 15:05:49.872602 2025] [security2:error] [pid 23070:tid 23070] [client 142.44.218.103:25945] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.adamsclothiers.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.adamsclothiers.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aQZaDcaXiRocwxJo2rc5JgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-18 04:03:53 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): ... show more (mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 00:03:46.378018 2025] [security2:error] [pid 12031:tid 12031] [client 142.44.218.103:55445] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.nearfieldchrist.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.nearfieldchrist.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aMuEom0iSz3tL4vzw_wGVQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 WhiteShark	2025-08-29 12:25:26 (10 months ago)	writeimprover.com blocked due to abusive behavior	Email Spam
🇺🇸 TPI-Abuse	2025-08-21 14:29:27 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): ... show more (mod_security) mod_security (id:210730) triggered by 142.44.218.103 (14244218103.writeimprover.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 10:29:22.803909 2025] [security2:error] [pid 12439:tid 12439] [client 142.44.218.103:23543] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.kidswow.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kidswow.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aKctQlQtAeR6TGyF1hKpJgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.147

🇳🇱 195.178.110.28

🇨🇦 170.9.40.164

🇲🇼 168.253.224.242

🇪🇸 158.49.70.49

🇷🇺 94.41.141.36

🇳🇱 45.148.10.141

🇹🇼 34.81.72.185

🇪🇹 196.188.187.59

🇮🇷 185.109.244.91

🇫🇮 147.185.133.181

🇫🇷 141.95.170.136

🇸🇬 124.197.123.46

🇻🇳 103.133.109.99

🇩🇪 69.5.169.242

🇳🇱 195.178.110.227

🇩🇪 193.148.56.148

🇸🇬 157.230.254.77

🇧🇷 138.94.139.36

🇨🇳 112.25.252.50