AbuseIPDB » 107.172.239.49

107.172.239.49 was found in our database!

This IP was reported 1,357 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-172-239-49-host.colocrossing.com
Domain Name	hostpapa.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 107.172.239.49

Whois 107.172.239.49

IP Abuse Reports for 107.172.239.49:

This IP address has been reported a total of 1,357 times from 467 distinct sources. 107.172.239.49 was first reported on July 26th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2025-05-25 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
security.rdmc.fr	2025-05-25 13:40:02 (2 weeks ago)	IP in Malicious Database	Web App Attack
Woodie	2025-05-25 05:23:24 (2 weeks ago)	2025-05-25T01:23:14.759073-04:00 debian sshd[1764188]: Failed password for root from 107.172.239.49 ... show more2025-05-25T01:23:14.759073-04:00 debian sshd[1764188]: Failed password for root from 107.172.239.49 port 53806 ssh2 2025-05-25T01:23:17.029442-04:00 debian sshd[1764248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-25T01:23:18.697777-04:00 debian sshd[1764248]: Failed password for root from 107.172.239.49 port 44492 ssh2 2025-05-25T01:23:21.657905-04:00 debian sshd[1764334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-25T01:23:23.541770-04:00 debian sshd[1764334]: Failed password for root from 107.172.239.49 port 44506 ssh2 ... show less	Brute-Force SSH
ThreatBook.io	2025-05-25 02:11:37 (2 weeks ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/107.172.239.49	SSH
christianb	2025-05-24 13:11:04 (2 weeks ago)	(sshd) Failed SSH login from 107.172.239.49 (US/United States/107-172-239-49-host.colocrossing.com)	Brute-Force SSH
Ariazonaa	2025-05-24 11:08:48 (2 weeks ago)	SSH brute-force attempt detected on fsn-01-monitor	Brute-Force SSH
Anonymous	2025-05-24 09:50:06 (2 weeks ago)	2025-05-24T09:50:04.054091+00:00 gra11-01-secure sshd[95946]: Invalid user user from 107.172.239.49 ... show more2025-05-24T09:50:04.054091+00:00 gra11-01-secure sshd[95946]: Invalid user user from 107.172.239.49 port 58228 2025-05-24T09:50:04.960149+00:00 gra11-01-secure sshd[95948]: Invalid user user from 107.172.239.49 port 58234 2025-05-24T09:50:05.872187+00:00 gra11-01-secure sshd[95950]: Invalid user user from 107.172.239.49 port 58248 ... show less	Brute-Force
pigro	2025-05-24 06:40:20 (2 weeks ago)	May 24 08:40:19 vps-07b0f6cf sshd[3258562]: User root from 107.172.239.49 not allowed because not li ... show moreMay 24 08:40:19 vps-07b0f6cf sshd[3258562]: User root from 107.172.239.49 not allowed because not listed in AllowUsers May 24 08:40:19 vps-07b0f6cf sshd[3258564]: User root from 107.172.239.49 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Woodie	2025-05-24 03:32:12 (2 weeks ago)	2025-05-23T23:32:01.263274-04:00 debian sshd[179775]: Failed password for root from 107.172.239.49 p ... show more2025-05-23T23:32:01.263274-04:00 debian sshd[179775]: Failed password for root from 107.172.239.49 port 46278 ssh2 2025-05-23T23:32:05.897357-04:00 debian sshd[179887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T23:32:07.402457-04:00 debian sshd[179887]: Failed password for root from 107.172.239.49 port 46106 ssh2 2025-05-23T23:32:09.492395-04:00 debian sshd[179957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T23:32:11.880599-04:00 debian sshd[179957]: Failed password for root from 107.172.239.49 port 46166 ssh2 ... show less	Brute-Force SSH
Woodie	2025-05-24 02:18:14 (2 weeks ago)	2025-05-23T22:18:05.282212-04:00 debian sshd[106234]: Failed password for root from 107.172.239.49 p ... show more2025-05-23T22:18:05.282212-04:00 debian sshd[106234]: Failed password for root from 107.172.239.49 port 46088 ssh2 2025-05-23T22:18:06.978360-04:00 debian sshd[106290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T22:18:09.086064-04:00 debian sshd[106290]: Failed password for root from 107.172.239.49 port 59740 ssh2 2025-05-23T22:18:11.257871-04:00 debian sshd[106356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T22:18:13.385685-04:00 debian sshd[106356]: Failed password for root from 107.172.239.49 port 59756 ssh2 ... show less	Brute-Force SSH
Woodie	2025-05-24 00:35:03 (2 weeks ago)	2025-05-23T20:34:55.081199-04:00 debian sshd[1665]: Failed password for root from 107.172.239.49 por ... show more2025-05-23T20:34:55.081199-04:00 debian sshd[1665]: Failed password for root from 107.172.239.49 port 44960 ssh2 2025-05-23T20:34:57.504424-04:00 debian sshd[1745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T20:34:58.969231-04:00 debian sshd[1745]: Failed password for root from 107.172.239.49 port 59100 ssh2 2025-05-23T20:35:00.600321-04:00 debian sshd[1798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.172.239.49 user=root 2025-05-23T20:35:02.476904-04:00 debian sshd[1798]: Failed password for root from 107.172.239.49 port 59128 ssh2 ... show less	Brute-Force SSH
devmoon.de	2025-05-23 23:12:00 (2 weeks ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
security.rdmc.fr	2025-05-23 15:45:35 (2 weeks ago)	IP in Malicious Database	Web App Attack
kernel-error.de	2025-05-23 13:39:35 (2 weeks ago)	May 23 15:38:41 ns1 sshd[26477]: Invalid user user from 107.172.239.49 port 39082 May 23 15:38 ... show moreMay 23 15:38:41 ns1 sshd[26477]: Invalid user user from 107.172.239.49 port 39082 May 23 15:38:42 ns1 sshd[26479]: Invalid user user from 107.172.239.49 port 39084 May 23 15:38:43 ns1 sshd[26481]: Invalid user user from 107.172.239.49 port 41312 ... show less	Brute-Force SSH
tentwentyfour	2025-05-23 13:25:13 (2 weeks ago)	Blocked for probing SSH accounts	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩