JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.132.100.80

145.132.100.80 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 39%: ?

39%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.132.100.80

Whois 145.132.100.80

IP Abuse Reports for 145.132.100.80:

This IP address has been reported a total of 209 times from 76 distinct sources. 145.132.100.80 was first reported on August 5th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hostynet	2026-06-15 23:15:42 (21 hours ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇫🇷 Hostynet	2026-06-14 23:06:13 (1 day ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
Anonymous	2026-06-14 10:24:54 (2 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 Hostynet	2026-06-13 22:57:43 (2 days ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-13 22:04:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 145.132.100.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 145.132.100.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:04:53.302424 2026] [security2:error] [pid 7919:tid 7919] [client 145.132.100.80:58434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.91"] [uri "/.env.local"] [unique_id "ai3UBXmrGgsZsOxc-8CPMgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Axel	2026-06-13 21:15:24 (2 days ago)	Blocked by UFW on MVI [80/tcp] \| SPT: 58432 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [80/tcp] \| SPT: 58432 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-05-24 08:25:03 (3 weeks ago)	Threat.live: Web Scan	Web App Attack
🇺🇸 Rayulcifer	2026-05-14 13:23:30 (1 month ago)	145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" ... show more 145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" 145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" 145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" 145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" 145.132.100.80 - - [14/May/2026:08:23:27 -0500] "CONNECT keyshield.xyz:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
Anonymous	2026-04-28 20:02:06 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇬🇧 S6	2026-03-14 00:12:35 (3 months ago)	Exim Dictionary Attack	Brute-Force DDoS Attack
🇳🇱 ipoac.nl	2026-03-13 23:56:36 (3 months ago)	2026-03-14T00:56:34.861119+01:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[145.132 ... show more 2026-03-14T00:56:34.861119+01:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[145.132.100.80]:51327: 550 5.1.1 <aankopen->: Recipient address rejected: User unknown; from=<checkverify.com> to=<aankopen-> proto=SMTP helo=<verify.com> 2026-03-14T00:56:34.861442+01:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[145.132.100.80]:51319: 550 5.1.1 <partenaires->: Recipient address rejected: User unknown; from=<checkverify.com> to=<partenaires-> proto=SMTP helo=<verify.com> 2026-03-14T00:56:34.862941+01:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[145.132.100.80]:51305: 550 5.1.1 <contactez->: Recipient address rejected: User unknown; from=<checkverify.com> to=<contactez-> proto=SMTP helo=<verify.com> 2026-03-14T00:56:34.862950+01:00 ipoac.nl postfix/smtpd-: NOQUEUE: reject: RCPT from unknown[145.132.100.80]:50630: 550 5.1.1 <business->: Recipient address rejected: User unknown; from=<checkverify.com> to=<business-> proto=SMTP helo=<verify.com> show less	Brute-Force
Anonymous	2026-03-13 23:44:52 (3 months ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇩🇪 moretrix	2026-03-13 23:40:52 (3 months ago)	2026-03-14T00:40:51.983327+01:00 ieyasu.moretrix.com postfix/postscreen[182137]: PREGREET 17 after 0 ... show more 2026-03-14T00:40:51.983327+01:00 ieyasu.moretrix.com postfix/postscreen[182137]: PREGREET 17 after 0.09 from [145.132.100.80]:51736: HELO verify.com\r\n 2026-03-14T00:40:51.983474+01:00 ieyasu.moretrix.com postfix/postscreen[182137]: PREGREET 17 after 0.09 from [145.132.100.80]:50705: HELO verify.com\r\n 2026-03-14T00:40:51.983697+01:00 ieyasu.moretrix.com postfix/postscreen[182137]: PREGREET 17 after 0.09 from [145.132.100.80]:50727: HELO verify.com\r\n ... show less	Brute-Force
🇫🇮 hieronymousch	2026-03-13 23:13:04 (3 months ago)	Mar 14 00:13:03 franssen postfix/smtpd[2309698]: NOQUEUE: reject: RCPT from unknown[145.132.100.80]: ... show more Mar 14 00:13:03 franssen postfix/smtpd[2309698]: NOQUEUE: reject: RCPT from unknown[145.132.100.80]: 554 5.7.1 Service unavailable; Client host [145.132.100.80] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/145.132.100.80; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<verify.com> Mar 14 00:13:04 franssen postfix/smtpd[2309693]: NOQUEUE: reject: RCPT from unknown[145.132.100.80]: 554 5.7.1 Service unavailable; Client host [145.132.100.80] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/145.132.100.80; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<verify.com> Mar 14 00:13:04 franssen postfix/smtpd[2309680]: NOQUEUE: reject: RCPT from unknown[145.132.100.80]: 554 5.7.1 Service unavailable; Client host [145.132.100.80] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/145.132.100.80; from=<[email protected]> to=<facturation@leptonic ... show less	Brute-Force
Anonymous	2026-03-13 22:47:43 (3 months ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c32::12c

🇨🇳 202.103.55.158

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141

🇺🇸 20.163.10.187

🇺🇸 216.73.161.114

🇧🇷 205.210.31.219

🇳🇱 193.176.31.254

🇦🇷 191.83.223.71

🇺🇸 162.243.147.237

🇺🇸 104.23.245.70

🇺🇸 104.23.245.25

🇦🇺 103.208.219.38

🇦🇪 92.99.114.241

🇷🇺 90.150.77.25

🇨🇳 47.122.127.10

🇺🇸 45.131.195.172

🇻🇳 14.225.46.21

🇷🇴 2.57.122.238

🇺🇸 216.73.163.115