JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.174.170.158

107.174.170.158 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	107-174-170-158-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.174.170.158

Whois 107.174.170.158

IP Abuse Reports for 107.174.170.158:

This IP address has been reported a total of 13 times from 11 distinct sources. 107.174.170.158 was first reported on January 26th 2022, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇻🇪 VenCERT	2026-02-15 18:00:41 (5 months ago)	trying to access non-authorized port	Port Scan
🇻🇪 VenCERT	2025-11-02 22:08:05 (8 months ago)	trying to access non-authorized port	DDoS Attack
🇺🇸 mattw	2025-10-08 12:00:00 (9 months ago)	Excessive and repetitive requests over short time period, consistent with automated or probing activ ... show more Excessive and repetitive requests over short time period, consistent with automated or probing activity. show less	Web App Attack
🇺🇸 xmission.com	2025-09-18 17:24:35 (9 months ago)	Blocked by UFW (TCP on 5152) Source port: 53238 TTL: 54 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5152) Source port: 53238 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 107.174.170.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2025-09-17 07:19:08 (9 months ago)	[Wed Sep 17 14:17:18.745788 2025] [authz_core:error] [pid 13426:tid 139973075384000] [client 107.174 ... show more [Wed Sep 17 14:17:18.745788 2025] [authz_core:error] [pid 13426:tid 139973075384000] [client 107.174.170.158:34200] AH01630: client denied by server configuration: /var/www/slpht [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[13433] [UUbiBjof6kE] [aMpgfoehPFzwPAyFrtozaAACSgY] keep_alive=[1] [2025-09-17 14:17:18.745791] [R:aMpgfoehPFzwPAyFrtozaAACSgY] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.58' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip Accept-Language:'zh-CN,zh;q=0.9 Upgrade-Insecure-Requests:'1 ... show less	Hacking Web App Attack
🇫🇷 smtp.com.es	2022-01-29 17:23:13 (4 years ago)	Brute force attempt	Brute-Force Exploited Host
Anonymous	2022-01-29 09:09:18 (4 years ago)	2022-01-29T08:09:15.584898server.lancairtalk.net dovecot[1093]: imap-login: Disconnected (no auth at ... show more 2022-01-29T08:09:15.584898server.lancairtalk.net dovecot[1093]: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=107.174.170.158, lip=173.255.201.230, session=<P2S4GLnWOJVrrqqe> ... show less	Port Scan Brute-Force
🇺🇸 yuryk.net	2022-01-28 14:39:47 (4 years ago)	Unauthorized logon attempts	Hacking Brute-Force Exploited Host
🇹🇷 GHS	2022-01-27 07:12:11 (4 years ago)	Unauthorized connection attempt from 107.174.170.158 on port 143	Port Scan Hacking
🇫🇷 smtp.com.es	2022-01-27 05:27:52 (4 years ago)	Brute force attempt	Brute-Force Exploited Host
🇺🇸 Brian Minton	2022-01-27 00:12:34 (4 years ago)	Jan 25 19:48:26 lab dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Jan 25 19:48:26 lab dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=107.174.170.158, lip=199.181.238.151, session=<mxHaZXLWNrhrrqqe> Jan 25 19:48:32 lab dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=107.174.170.158, lip=199.181.238.151, TLS handshaking: Connection closed, session=<+aY0ZnLWhuZrrqqe> Jan 26 23:12:26 lab dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=107.174.170.158, lip=199.181.238.151, session=<AyA+XYnW3aBrrqqe> Jan 26 23:12:27 lab dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=107.174.170.158, lip=199.181.238.151, TLS, session=<caVQXYnW47Nrrqqe> Jan 26 23:12:33 lab dovecot: imap-login: Aborted login (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=107.174.170.158, lip=199.181.238.151, TLS, session=<WJJhXYnWVcNrrqqe> ... show less	Brute-Force
🇸🇪 gandalf	2022-01-26 07:14:07 (4 years ago)	2022-01-26 13:14:05 wonderland auth[14998]: pam_unix(dovecot:auth): authentication failure; logname= ... show more 2022-01-26 13:14:05 wonderland auth[14998]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=107.174.170.158 show less	Email Spam Brute-Force
🇩🇪 iNetWorker	2022-01-26 02:30:32 (4 years ago)	pop/imap	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.212.167.160

🇫🇮 147.185.133.48

🇬🇧 20.0.53.105

🇩🇪 150.241.113.163

🇰🇷 115.68.208.117

🇺🇸 104.243.35.120

🇺🇸 91.230.168.29

🇧🇷 45.205.1.242

🇬🇧 20.0.53.104

🇲🇽 200.23.126.6

🇦🇷 179.49.102.255

🇧🇷 170.0.62.246

🇬🇭 154.160.37.8

🇺🇸 144.225.187.57

🇺🇸 130.51.22.249

🇮🇳 122.187.227.24

🇺🇸 45.79.109.193

🇬🇧 35.203.211.246

🇳🇱 31.59.44.150

🇬🇧 20.0.53.102