JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.172.96.11

107.172.96.11 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 0%: ?

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-172-96-11-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.172.96.11

Whois 107.172.96.11

IP Abuse Reports for 107.172.96.11:

This IP address has been reported a total of 55 times from 43 distinct sources. 107.172.96.11 was first reported on October 7th 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-09-04 06:52:34 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 WhiteShark	2025-09-02 22:33:54 (9 months ago)	AS36352 blocked due to abusive behavior	Email Spam
🇩🇪 Packets-Decreaser.NET	2025-09-01 16:18:16 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (10 months ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇬🇧 Silly Development	2025-08-01 23:13:52 (10 months ago)	Malicious activity detected from 36352 AS-COLOCROSSING towards host panel.sillydev.co.uk (GET HTTP/2 ... show more Malicious activity detected from 36352 AS-COLOCROSSING towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-01T23:13:52Z (11 occurrences) show less	DDoS Attack Exploited Host
🇫🇷 ᴀʀᴛ	2025-08-01 23:12:18 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from US. ASN: 36352 (AS-COLOCROSSING) Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (l7ddos) from US. ASN: 36352 (AS-COLOCROSSING) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇬🇧 uira.live	2025-05-04 15:54:48 (1 year ago)	Malicious activity detected from 36352 AS-COLOCROSSING towards host uira.live (GET HTTP/2) @ 2025-05 ... show more Malicious activity detected from 36352 AS-COLOCROSSING towards host uira.live (GET HTTP/2) @ 2025-05-04T15:54:48Z (1 occurrences) show less	DDoS Attack
🇨🇿 unhfree.net	2025-05-04 01:20:45 (1 year ago)	May 4 03:20:38 canopus postfix/smtpd[2423346]: 66388DC1000: reject: RCPT from unknown[107.172.96.11 ... show more May 4 03:20:38 canopus postfix/smtpd[2423346]: 66388DC1000: reject: RCPT from unknown[107.172.96.11]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 03:20:38 canopus postfix/smtpd[2423346]: 66388DC1000: reject: RCPT from unknown[107.172.96.11]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 03:20:38 canopus postfix/smtpd[2423346]: 66388DC1000: reject: RCPT from unknown[107.172.96.11]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 4 03:20:45 canopus postfix/smtpd[2423346]: NOQUEUE: reject: RCPT from unknown[107.172.96.11]: ... show less	Brute-Force Exploited Host
🇩🇪 WhiteShark	2025-04-02 19:27:16 (1 year ago)	AS36352 blocked due to abusive behavior	Email Spam
🇩🇪 nyuuzyou	2025-02-05 03:27:09 (1 year ago)	Intensive scraping: /web?s=Custom%20art%20collaboration%20galleries%20Kurashiki&lang=fj&scraper=goog ... show more Intensive scraping: /web?s=Custom%20art%20collaboration%20galleries%20Kurashiki&lang=fj&scraper=google_cse show less	Bad Web Bot
Anonymous	2025-02-05 02:52:08 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇩🇪 IllusionCloud	2025-01-20 00:02:57 (1 year ago)	ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious ac ... show more ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious activities, including Internet Scanning, Denial of Service (DoS) Attacks, Participation in Distributed Denial of Service (DDoS) Attacks, Transmission of Invalid Packets, Potential IP Spoofing. show less	DNS Compromise DNS Poisoning DDoS Attack FTP Brute-Force Ping of Death SQL Injection Brute-Force Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 IllusionCloud	2025-01-16 00:01:53 (1 year ago)	ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious ac ... show more ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious activities, including Internet Scanning, Denial of Service (DoS) Attacks, Participation in Distributed Denial of Service (DDoS) Attacks, Transmission of Invalid Packets, Potential IP Spoofing. show less	DNS Compromise DNS Poisoning DDoS Attack FTP Brute-Force Ping of Death SQL Injection Brute-Force Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 IllusionCloud	2025-01-14 00:02:07 (1 year ago)	ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious ac ... show more ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious activities, including Internet Scanning, Denial of Service (DoS) Attacks, Participation in Distributed Denial of Service (DDoS) Attacks, Transmission of Invalid Packets, Potential IP Spoofing. show less	DNS Compromise DNS Poisoning DDoS Attack FTP Brute-Force Ping of Death SQL Injection Brute-Force Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 IllusionCloud	2025-01-12 00:01:55 (1 year ago)	ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious ac ... show more ILShield Appliance Alert: The following IPv4 address has been identified with potential malicious activities, including Internet Scanning, Denial of Service (DoS) Attacks, Participation in Distributed Denial of Service (DDoS) Attacks, Transmission of Invalid Packets, Potential IP Spoofing. show less	DNS Compromise DNS Poisoning DDoS Attack FTP Brute-Force Ping of Death SQL Injection Brute-Force Exploited Host Web App Attack SSH IoT Targeted

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.79

🇺🇸 165.154.163.37

🇮🇳 157.15.147.22

🇯🇵 133.167.118.76

🇺🇸 100.48.141.62

🇷🇺 93.159.230.85

🇫🇷 85.217.140.13

🇺🇸 66.132.172.151

🇺🇸 44.220.185.186

🇦🇷 200.0.215.47

🇸🇬 172.70.147.160

🇷🇴 151.242.30.224

🇭🇰 103.100.208.168

🇫🇷 85.217.140.47

🇨🇳 58.209.82.184

🇺🇸 44.170.239.72

🇳🇱 185.213.174.141

🇧🇷 170.246.187.208

🇨🇳 123.190.210.20

🇺🇸 104.234.53.115