JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.172.204.18

107.172.204.18 was found in our database!

This IP was reported 211 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-172-204-18-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.172.204.18

Whois 107.172.204.18

IP Abuse Reports for 107.172.204.18:

This IP address has been reported a total of 211 times from 134 distinct sources. 107.172.204.18 was first reported on May 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AdrianT	2026-06-18 09:24:50 (2 days ago)	SSH brute force	Brute-Force SSH
🇧🇷 helix	2026-06-13 03:56:33 (1 week ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
Anonymous	2026-06-11 18:52:37 (1 week ago)	Fail2ban report Host: v22017064741750900.bestsrv.de Jail: sshd Service: SSH Port: 2222	Brute-Force SSH
🇺🇸 sh97	2026-06-06 07:05:53 (2 weeks ago)	dedirock-38618307: SSH Brute Force from 107.172.204.18 at 2026-06-06 11:05:53 +04	Brute-Force SSH
🇺🇸 sh97	2026-06-05 11:47:15 (2 weeks ago)	dedirock-38618307: SSH Brute Force from 107.172.204.18 at 2026-06-05 15:47:14 +04	Brute-Force SSH
🇺🇸 sh97	2026-06-03 21:18:20 (2 weeks ago)	dedirock-38618307: SSH Brute Force from 107.172.204.18 at 2026-06-04 01:18:20 +04	Brute-Force SSH
🇮🇹 sh97	2026-05-29 13:43:43 (3 weeks ago)	IT02-IF: SSH Brute Force from 107.172.204.18 at 2026-05-29 19:13:43 IST	Brute-Force SSH
Anonymous	2026-05-29 12:15:16 (3 weeks ago)	Fail2ban report Host: v22017064741750900.bestsrv.de Jail: sshd Service: SSH Port: 2222	Brute-Force SSH
🇬🇧 AdrianT	2026-05-29 06:28:01 (3 weeks ago)	SSH brute force	Brute-Force SSH
🇨🇭 m_vlasov	2026-05-29 03:50:24 (3 weeks ago)	Cowrie SSH/Telnet honeypot: 3 login attempts, 3 sessions, 2 shell commands.	Port Scan Brute-Force SSH Hacking
Anonymous	2026-05-25 13:03:26 (3 weeks ago)	Trying to login	Brute-Force SSH
🇺🇸 jennij	2026-05-25 12:02:39 (3 weeks ago)	Fail2Ban sshd ban on alexandra ...	Brute-Force SSH
🇺🇸 George0phile	2026-05-25 12:00:04 (3 weeks ago)	SSH brute force on port 22 -- 20 attempts, 1 successful. Credentials: root:1004, 345gs5662d34:3245gs ... show more SSH brute force on port 22 -- 20 attempts, 1 successful. Credentials: root:1004, 345gs5662d34:3245gs5662d34, adminuser:Aa666666. Active: 2026-05-25T08:52 to 2026-05-25T10:16. Malware: miner (critical); trojan (high); trojan (critical). Source: AS36352 HostPapa (Los Angeles, US). Data from SSH honeypot — not a production system. show less	Brute-Force SSH IoT Targeted
🇩🇪 AetherFox	2026-05-25 11:25:12 (3 weeks ago)	May 25 13:21:42 nexus-node-02 sshd[1343046]: pam_unix(sshd:auth): authentication failure; logname= u ... show more May 25 13:21:42 nexus-node-02 sshd[1343046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.204.18 user=root May 25 13:21:44 nexus-node-02 sshd[1343046]: Failed password for root from 107.172.204.18 port 38634 ssh2 May 25 13:25:10 nexus-node-02 sshd[1343080]: Invalid user www from 107.172.204.18 port 38918 May 25 13:25:10 nexus-node-02 sshd[1343080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.204.18 May 25 13:25:12 nexus-node-02 sshd[1343080]: Failed password for invalid user www from 107.172.204.18 port 38918 ssh2 ... show less	Brute-Force SSH
🇫🇷 Asthriona	2026-05-25 11:12:02 (3 weeks ago)	2026-05-25T13:08:17.773693+02:00 Fubuki sshd[3014024]: pam_unix(sshd:auth): authentication failure; ... show more 2026-05-25T13:08:17.773693+02:00 Fubuki sshd[3014024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.204.18 user=root 2026-05-25T13:08:20.076494+02:00 Fubuki sshd[3014024]: Failed password for root from 107.172.204.18 port 60000 ssh2 2026-05-25T13:12:00.293756+02:00 Fubuki sshd[3014390]: Invalid user tomcat from 107.172.204.18 port 60274 2026-05-25T13:12:00.300409+02:00 Fubuki sshd[3014390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.204.18 2026-05-25T13:12:02.217121+02:00 Fubuki sshd[3014390]: Failed password for invalid user tomcat from 107.172.204.18 port 60274 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 211 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.147

🇧🇷 205.210.31.216

🇭🇰 199.45.155.106

🇳🇱 193.142.147.55

🇸🇪 185.217.0.181

🇳🇱 176.65.149.201

🇺🇸 166.1.60.230

🇯🇵 152.32.145.156

🇫🇮 147.185.133.74

🇺🇸 147.185.132.81

🇷🇴 143.20.185.232

🇨🇳 112.86.225.188

🇧🇷 104.23.254.175

🇺🇸 96.232.234.45

🇸🇪 89.233.240.49

🇩🇪 89.107.69.140

🇺🇸 17.241.219.83

🇧🇷 205.210.31.178

🇲🇽 189.203.163.10

🇨🇭 185.211.94.76