JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.172.163.249

107.172.163.249 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 16%: ?

16%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-172-163-249-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.172.163.249

Whois 107.172.163.249

IP Abuse Reports for 107.172.163.249:

This IP address has been reported a total of 22 times from 13 distinct sources. 107.172.163.249 was first reported on October 20th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-22 12:00:00 (2 weeks ago)	Fake Googlebot: User-Agent claims Googlebot/2.1 but the source IP (AS36352 AS-COLOCROSSING, US) is o ... show more Fake Googlebot: User-Agent claims Googlebot/2.1 but the source IP (AS36352 AS-COLOCROSSING, US) is outside Google's official IP ranges and has no crawl-*.googlebot.com reverse DNS. 2 requests observed between 2026-05-23 and 2026-06-22. show less	Bad Web Bot
🇫🇷 bigorre.org	2026-06-20 16:40:50 (2 weeks ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
Anonymous	2026-06-05 06:11:02 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 ne1for23	2026-04-23 07:10:14 (2 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 107.172.163.249 - - [23/Apr/2026:07:10:13 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇯🇵 pixelboost.kr	2026-02-20 11:56:43 (4 months ago)	107.172.163.249 - - [20/Feb/2026:20:56:42 +0900] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Window ... show more 107.172.163.249 - - [20/Feb/2026:20:56:42 +0900] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 vdub144	2025-12-13 17:15:33 (6 months ago)	Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /.env \| U ... show more Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36 \| Blocked by: nginx-bot-hell show less	Web App Attack
🇸🇬 Charles	2025-11-07 00:36:55 (7 months ago)	107.172.163.249 - - [07/Nov/2025:08:36:53 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Wind ... show more 107.172.163.249 - - [07/Nov/2025:08:36:53 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇮🇪 AutosOnShow	2025-10-21 13:21:05 (8 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2025-10-21 13:20:10.084 \|	Web App Attack
🇮🇪 Jim Keir	2025-09-14 17:19:21 (9 months ago)	2025-09-14 17:19:20 107.172.163.249 File scanning, blocking 107.172.163.249 for 5 minutes	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-07 16:07:29 (10 months ago)	Malicious IP detected by WAF with anomaly score 11.0. Attack types: Suspicious URL detected (extende ... show more Malicious IP detected by WAF with anomaly score 11.0. Attack types: Suspicious URL detected (extended rules), Timestamp deviates by 2.8 hours, Timestamp deviates by 1.3 hours (+7 more). Activity: 1511 requests to 50 URLs. Period: 2025-08-07 11:04:18 - 2025-08-07 11:04:18 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇮🇪 Jim Keir	2025-07-21 04:14:33 (11 months ago)	2025-07-21 04:14:33 107.172.163.249 File scanning, blocking 107.172.163.249 for 5 minutes	Web App Attack
Anonymous	2025-04-07 04:15:43 (1 year ago)	Malicious activity detected	Hacking Brute-Force
Anonymous	2025-02-22 22:09:10 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-14 13:33:18 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-04 12:01:56 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇹🇼 198.235.24.109

🇰🇷 59.21.37.60

🇺🇸 40.124.175.226

🇺🇸 72.253.251.7

🇳🇱 45.148.10.147

🇺🇸 2604:a880:400:d1:0:4:6c70:c001

🇿🇦 185.132.186.33

🇺🇸 147.185.132.168

🇺🇸 147.185.132.22

🇯🇵 141.147.169.202

🇺🇸 66.132.195.16

🇳🇱 45.148.10.151

🇺🇸 147.185.132.48

🇫🇷 51.159.149.103

🇪🇸 46.253.45.10

🇺🇸 45.79.82.114

🇭🇰 129.226.114.61

🇮🇳 103.20.231.166

🇱🇹 62.60.130.219