JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 132.196.31.85

132.196.31.85 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 64%: ?

64%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 132.196.31.85

Whois 132.196.31.85

IP Abuse Reports for 132.196.31.85:

This IP address has been reported a total of 17 times from 15 distinct sources. 132.196.31.85 was first reported on July 26th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-08-28 04:43:51 (4 hours ago)	2026-08-28 04:43:51 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 02:59:03 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 132.196.31.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 132.196.31.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 22:58:59.076470 2026] [security2:error] [pid 13102:tid 13102] [client 132.196.31.85:29752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.119"] [uri "/.git/HEAD"] [unique_id "apD5c_iGo9A4sHKMDFc1SgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-28 02:54:20 (6 hours ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇧🇾 lns.bz	2026-08-28 02:46:38 (6 hours ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-08-28 02:35:48 (6 hours ago)	denied traffic to a non-approved destination port. destination port 2086.	Port Scan
🇪🇸 librebit	2026-08-25 03:08:41 (3 days ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇯🇵 SentinalX by uzumaru	2026-08-06 00:52:36 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: discord.com:443 show less	Open Proxy Port Scan
🇩🇪 www.fransveldman.world	2026-07-28 12:14:47 (4 weeks ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇳🇱 spirttm	2026-07-26 04:05:00 (1 month ago)	132.196.31.85 - - [26/Jul/2026:04:04:50 +0000] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (W ... show more 132.196.31.85 - - [26/Jul/2026:04:04:50 +0000] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 132.196.31.85 - - [26/Jul/2026:04:04:51 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 132.196.31.85 - - [26/Jul/2026:04:04:53 +0000] "GET /.git/logs/HEAD HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" 132.196.31.85 - - [26/Jul/2026:04:04:54 +0000] "GET /.git/refs/heads/master HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 132.196.31.85 - - [26/Jul/2026:04:04:55 +0000] "GET /.git/refs/heads/main HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 132.196.31.85 - - [26/Jul/2026:04:04:56 +0000] "GET /.git/index HT ... show less	Port Scan Web App Attack
🇺🇸 Mainpine	2026-07-26 03:59:26 (1 month ago)	probing for vulnerable web apps	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 03:52:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 132.196.31.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 132.196.31.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:52:39.743410 2026] [security2:error] [pid 3145017:tid 3145017] [client 132.196.31.85:25602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.69"] [uri "/.git/HEAD"] [unique_id "amWEhzVa-JBwKbE0WCi6ywAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-26 03:46:03 (1 month ago)	132.196.31.85 - - [25/Jul/2026:23:45:50 -0400] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 132.196.31.85 - - [25/Jul/2026:23:45:50 -0400] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 132.196.31.85 - - [25/Jul/2026:23:45:51 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 132.196.31.85 - - [25/Jul/2026:23:46:03 -0400] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" ... show less	Web App Attack
🇺🇸 MPL	2026-07-26 03:22:40 (1 month ago)	tcp/multiple (10 or more attempts)	Port Scan
🇳🇱 SysAdmin Dylan	2026-07-26 02:39:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 132.196.31.85 (US/United States/-): 10 in the l ... show more (mod_security) mod_security (id:210492) triggered by 132.196.31.85 (US/United States/-): 10 in the last 3600 secs show less	Brute-Force
🇷🇸 Scan	2026-07-26 01:19:20 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.42.68

🇩🇪 46.101.180.162

🇰🇷 218.159.144.187

🇬🇧 195.206.182.196

🇸🇬 193.37.32.182

🇳🇱 185.242.226.58

🇳🇱 160.119.66.52

🇸🇬 157.230.253.31

🇨🇳 150.255.89.56

🇺🇸 108.35.129.132

🇮🇷 95.38.179.72

🇫🇷 80.87.206.19

🇰🇷 59.15.199.42

🇧🇷 45.205.1.246

🇸🇬 43.134.94.126

🇺🇸 38.148.20.75

🇨🇳 27.19.119.71

🇫🇷 2400:cb00:727:1000:b2cd:d383:779d:a897

🇫🇷 2400:cb00:727:1000:a5c0:e01b:563c:c88

🇫🇷 2001:41d0:305:2100::eac6