AbuseIPDB » 172.245.157.5
172.245.157.5 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 7%: ?
| ISP |
HostPapa
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS36352
|
| Hostname(s) |
172-245-157-5-host.colocrossing.com
|
| Domain Name |
hostpapa.com
|
| Country |
🇺🇸
United States of America
|
| City |
Buffalo, New York
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 172.245.157.5:
This IP address has been reported a total of
7
times from
5 distinct
sources.
172.245.157.5 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇮🇪
AutosOnShow
|
|
blocked for webapp attack | path requested: /.env | seen at 2026-04-22 00:47:21.820 |
|
Web App Attack
|
|
|
🇪🇸
el-brujo
|
|
Cloudflare WAF: Request Path: /juegos_y_consolas/call_of_duty_modern_warfare-t279051.0.html;msg13735 ...
show more
Cloudflare WAF: Request Path: /juegos_y_consolas/call_of_duty_modern_warfare-t279051.0.html;msg1373540 Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: AS-COLOCROSSING - HostPapa Country: US Method: GET Timestamp: 2026-04-10T00:21:59Z ruleId: 561d6e73a48e41d18a1a014356a284e1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
|
Hacking
SQL Injection
Web App Attack
|
|
|
🇮🇪
AutosOnShow
|
|
blocked for webapp attack | path requested: /.env | seen at 2026-03-16 04:26:08.095 |
|
Web App Attack
|
|
|
🇮🇪
Jim Keir
|
|
2026-01-18 21:54:37 172.245.157.5 File scanning, blocking 172.245.157.5 for 5 minutes
|
Web App Attack
|
|
|
🇮🇪
Jim Keir
|
|
2026-01-07 22:53:23 172.245.157.5 File scanning, blocking 172.245.157.5 for 5 minutes
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:217280) triggered by 172.245.157.5 (172-245-157-5-host.colocrossing. ...
show more
(mod_security) mod_security (id:217280) triggered by 172.245.157.5 (172-245-157-5-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 12 10:26:57.681861 2024] [security2:error] [pid 20617] [client 172.245.157.5:54091] [client 172.245.157.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||www.namisushionline.com|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.namisushionline.com"] [uri "/action.php"] [unique_id "ZaFaQarlOFKfp50GQ3sQ-wAAAAA"], referer: https://www.namisushionline.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: