JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.172.235.49

107.172.235.49 was found in our database!

This IP was reported 363 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-172-235-49-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.172.235.49

Whois 107.172.235.49

IP Abuse Reports for 107.172.235.49:

This IP address has been reported a total of 363 times from 211 distinct sources. 107.172.235.49 was first reported on February 26th 2023, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇿 delsio	2026-06-04 13:30:19 (14 hours ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=107.172.235.49; destinati ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=107.172.235.49; destination=196.10.148.237; destination_port=22; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted,feed=https://blocklist.net.ua/blocklist.csv alert=Live Flow High Score dst=196.10.148.237 port=22 show less	Port Scan SSH
🇵🇱 webadmin	2026-06-04 08:29:39 (19 hours ago)		Brute-Force SSH
🇺🇸 mg	2026-06-04 05:44:56 (21 hours ago)	2026-06-03T22:44:49.793354-07:00 bluejay sshd[873028]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-03T22:44:49.793354-07:00 bluejay sshd[873028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.235.49 user=root 2026-06-03T22:44:52.199106-07:00 bluejay sshd[873028]: Failed password for root from 107.172.235.49 port 34300 ssh2 2026-06-03T22:44:53.834236-07:00 bluejay sshd[873045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.235.49 user=root 2026-06-03T22:44:55.457119-07:00 bluejay sshd[873045]: Failed password for root from 107.172.235.49 port 57862 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-04 02:20:19 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 rori.rapidtravelgroup.com	2026-06-04 02:08:10 (1 day ago)	Fail2Ban+ban+on+sshd	Brute-Force SSH
🇵🇱 Wepted	2026-06-03 22:04:00 (1 day ago)	2026-06-04T00:03:55.399625+02:00 axisverse sshd-session[925388]: Invalid user user from 107.172.235. ... show more 2026-06-04T00:03:55.399625+02:00 axisverse sshd-session[925388]: Invalid user user from 107.172.235.49 port 45140 2026-06-04T00:03:58.112001+02:00 axisverse sshd-session[925441]: Invalid user user from 107.172.235.49 port 59114 2026-06-04T00:03:59.365671+02:00 axisverse sshd-session[925484]: Invalid user user from 107.172.235.49 port 46066 ... show less	Brute-Force SSH
🇬🇧 blueskysystems	2026-06-03 13:15:03 (1 day ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force
🇵🇱 MP.tv	2026-06-03 11:47:33 (1 day ago)	2026-06-03T13:47:24.325122+02:00 transfer-srv sshd[852369]: pam_unix(sshd:auth): authentication fail ... show more 2026-06-03T13:47:24.325122+02:00 transfer-srv sshd[852369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.235.49 user=root 2026-06-03T13:47:26.431134+02:00 transfer-srv sshd[852369]: Failed password for root from 107.172.235.49 port 36832 ssh2 2026- ... show less	Brute-Force SSH
🇺🇸 Tect.host	2026-06-03 11:33:42 (1 day ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇺🇸 Your_Top	2026-06-03 08:14:11 (1 day ago)	2026-06-03T01:14:00.035318-07:00 cm0app00.cyberstadium.com sshd[879117]: Invalid user user from 107. ... show more 2026-06-03T01:14:00.035318-07:00 cm0app00.cyberstadium.com sshd[879117]: Invalid user user from 107.172.235.49 port 37900 2026-06-03T01:14:01.043248-07:00 cm0app00.cyberstadium.com sshd[879119]: Invalid user user from 107.172.235.49 port 42814 2026-06-03T01:14:02.662392-07:00 cm0app00.cyberstadium.com sshd[879141]: Invalid user user from 107.172.235.49 port 48846 2026-06-03T01:14:06.388471-07:00 cm0app00.cyberstadium.com sshd[879163]: Invalid user user from 107.172.235.49 port 57216 2026-06-03T01:14:10.537149-07:00 cm0app00.cyberstadium.com sshd[879232]: Invalid user user from 107.172.235.49 port 59764 ... show less	Brute-Force SSH
🇩🇪 AetherFox	2026-06-03 04:59:01 (1 day ago)	AetherFox VoidGuard detected: 2026-06-03T04:58:47.909562+00:00 AetherFox-gate-01 sshd[3041309]: Fail ... show more AetherFox VoidGuard detected: 2026-06-03T04:58:47.909562+00:00 AetherFox-gate-01 sshd[3041309]: Failed password for root from 107.172.235.49 port 46584 ssh2 2026-06-03T04:58:53.966502+00:00 AetherFox-gate-01 sshd[3041322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.235.49 user=root 2026-06-03T04:58:55.468068+00:00 AetherFox-gate-01 sshd[3041322]: Failed password for root from 107.172.235.49 port 36194 ssh2 2026-06-03T04:58:59.389249+00:00 AetherFox-gate-01 sshd[3041332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.235.49 user=root 2026-06-03T04:59:01.384073+00:00 AetherFox-gate-01 sshd[3041332]: Failed password for root from 107.172.235.49 port 56046 ssh2 ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-03 04:19:25 (1 day ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇩🇪 Click-Networks	2026-06-02 20:10:53 (2 days ago)	Jun 2 21:14:37 wh02 sshd[3388343]: Connection closed by authenticating user root 107.172.235.49 por ... show more Jun 2 21:14:37 wh02 sshd[3388343]: Connection closed by authenticating user root 107.172.235.49 port 54504 [preauth] Jun 2 21:14:46 wh02 sshd[3388346]: Connection closed by authenticating user root 107.172.235.49 port 44022 [preauth] Jun 2 21:14:52 wh02 sshd[3388386]: Connection closed by authenticating user root 107.172.235.49 port 45148 [preauth] Jun 2 21:15:04 wh02 sshd[3388400]: Connection closed by authenticating user root 107.172.235.49 port 56204 [preauth] Jun 2 21:15:10 wh02 sshd[3388445]: Connection closed by authenticating user root 107.172.235.49 port 34642 [preauth] Jun 2 21:15:16 wh02 sshd[3388452]: Connection closed by authenticating user root 107.172.235.49 port 49350 [preauth] Jun 2 21:15:25 wh02 sshd[3388474]: Connection closed by authenticating user root 107.172.235.49 port 34956 [preauth] Jun 2 21:15:33 wh02 sshd[3388499]: Connection closed by authenticating user root 107.172.235.49 port 37330 [preauth] Jun 2 21:15:39 wh02 sshd[3388501]: Connection closed by show less	Brute-Force Exploited Host SSH
🇺🇸 juguemosalacarioca.com	2026-06-02 18:29:58 (2 days ago)	(sshd) Failed SSH login from 107.172.235.49 (US/United States/107-172-235-49-host.colocrossing.com): ... show more (sshd) Failed SSH login from 107.172.235.49 (US/United States/107-172-235-49-host.colocrossing.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 2 18:29:37 instance-20200224-1146 sshd[16753]: Invalid user user from 107.172.235.49 port 57662 Jun 2 18:29:43 instance-20200224-1146 sshd[16759]: Invalid user user from 107.172.235.49 port 58428 Jun 2 18:29:47 instance-20200224-1146 sshd[16767]: Invalid user user from 107.172.235.49 port 36304 Jun 2 18:29:52 instance-20200224-1146 sshd[16774]: Invalid user user from 107.172.235.49 port 39810 Jun 2 18:29:56 instance-20200224-1146 sshd[16780]: Invalid user user from 107.172.235.49 port 43044 show less	Port Scan
🇩🇪 ghostwarriors	2026-06-02 16:50:35 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 363 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 168.144.95.137

🇺🇸 162.216.150.160

🇺🇸 136.112.221.49

🇨🇳 121.29.149.148

🇺🇸 54.84.179.214

🇳🇱 45.153.34.195

🇺🇸 198.199.88.161

🇨🇳 171.105.76.47

🇻🇳 113.174.90.100

🇺🇸 65.49.1.35

🇺🇸 52.0.63.151

🇱🇹 45.227.254.170

🇮🇩 41.216.177.55

🇭🇰 199.45.154.183

🇳🇱 185.226.197.63

🇬🇪 178.134.233.24

🇺🇸 72.14.185.207

🇺🇸 66.132.186.135

🇩🇪 45.135.194.83

🇧🇪 34.76.237.251