JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.132.101.179

145.132.101.179 was found in our database!

This IP was reported 229 times. Confidence of Abuse is 20%: ?

20%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.132.101.179

Whois 145.132.101.179

IP Abuse Reports for 145.132.101.179:

This IP address has been reported a total of 229 times from 148 distinct sources. 145.132.101.179 was first reported on August 24th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-23 10:53:07 (2 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 50192 TTL: 113 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 50192 TTL: 113 Packet length: 40 TOS: 0x00 This report (for 145.132.101.179) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-06-02 00:46:58 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-05-22 02:30:33 (1 month ago)	(PERMBLOCK) 145.132.101.179 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ... show more (PERMBLOCK) 145.132.101.179 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-22 00:47:19 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 145.132.101.179 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 145.132.101.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 20:47:15.861701 2026] [security2:error] [pid 22451:tid 22451] [client 145.132.101.179:46096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garrelsms.com"] [uri "/config/.env"] [unique_id "ag-nkws0qev5jceojJqnNQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-22 00:11:57 (1 month ago)	(caddyscan) Scanner path probe from 145.132.101.179 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.132.101.179 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.132.101.179 - - [22/May/2026:00:02:37 +0000] "GET /@fs/.env.production?import&raw HTTP/1.1" [REDACTED] 200 2627 145.132.101.179 - - [22/May/2026:00:02:37 +0000] "GET /@fs/.env.test?import&raw HTTP/1.1" [REDACTED] 200 2627 145.132.101.179 - - [22/May/2026:00:02:37 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 145.132.101.179 - - [22/May/2026:00:02:38 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" [REDACTED] 200 2627 145.132.101.179 - - [22/May/2026:00:11:54 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" show less	Port Scan
🇵🇱 lns.bz	2026-05-21 22:10:16 (1 month ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2026-04-23 00:45:27 (2 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/145.132.101.179 2026-04-22 14: ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/145.132.101.179 2026-04-22 14:18:06 ["pwd"] 2026-04-22 14:18:32 ["grep 'model name' /proc/cpuinfo 2>/dev/null \| head -1 \| cut -d ':' -f2- \| sed 's/^ *//' \| xargs \|\| echo unknown"] 2026-04-22 14:17:00 ["hostname"] 2026-04-22 14:19:03 ["whoami"] 2026-04-22 14:11:52 ["hostname"] show less	Brute-Force
🇺🇸 Bro Charlie	2026-04-22 06:12:36 (2 months ago)	2026-04-22T14:12:30.847328+08:00 localhost sshd[446267]: pam_unix(sshd:auth): authentication failure ... show more 2026-04-22T14:12:30.847328+08:00 localhost sshd[446267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.132.101.179 user=root 2026-04-22T14:12:33.692548+08:00 localhost sshd[446267]: Failed password for root from 145.132.101.179 port 56320 ssh2 ... show less	Brute-Force SSH
🇹🇷 0xi	2026-03-12 15:30:43 (3 months ago)	SSH brute-force attack detected (51 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, S ... show more SSH brute-force attack detected (51 attempts). Targeted ports: 22. Triggered sensors: P0f, Cowrie, Suricata, Fatt. Post-exploitation commands were executed. Observed via distributed honeypot network. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-01 06:07:43 (4 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 octageeks.com	2026-03-01 05:10:19 (4 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇫🇷 ericshim.me	2026-03-01 05:01:01 (4 months ago)	Cowrie honeypot hit at 2026-02-28T06:04:45.510235Z	Brute-Force SSH
🇫🇷 SiyCah	2026-03-01 04:00:53 (4 months ago)	145.132.101.179 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total tim ... show more 145.132.101.179 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time wasted: 12s. Total bytes sent by tarpit: 934B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇦🇹 urnilxfgbez	2026-02-28 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 229 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.225

🇺🇸 195.184.76.185

🇪🇸 185.239.161.4

🇨🇳 180.76.179.77

🇺🇸 172.190.89.127

🇩🇪 162.19.243.145

🇺🇸 135.237.125.174

🇰🇭 103.134.95.130

🇫🇷 91.196.152.191

🇺🇸 65.49.1.155

🇲🇾 47.250.118.118

🇳🇱 45.148.10.147

🇮🇳 20.235.127.11

🇺🇸 2607:f8b0:4002:c2c::128

🇮🇹 185.15.171.79

🇮🇳 139.5.50.180

🇨🇳 114.222.0.183

🇬🇧 87.236.176.9

🇳🇱 81.19.216.95

🇺🇸 47.251.165.65