JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.132.102.176

145.132.102.176 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 61%: ?

61%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.132.102.176

Whois 145.132.102.176

IP Abuse Reports for 145.132.102.176:

This IP address has been reported a total of 29 times from 23 distinct sources. 145.132.102.176 was first reported on August 14th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (13 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 sgwid	2026-06-03 13:26:11 (23 hours ago)	145.132.102.176 - - [03/Jun/2026:00:30:47 +0000] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 145.132.102.176 - - [03/Jun/2026:00:30:47 +0000] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 145.132.102.176 - - [03/Jun/2026:00:30:54 +0000] "GET /.env.save HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 145.132.102.176 - - [03/Jun/2026:00:30:56 +0000] "GET /wp-config.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 145.132.102.176 - - [03/Jun/2026:00:30:58 +0000] "GET /wp-config.php.bak HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-03 03:49:16 (1 day ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Scan	2026-06-03 02:22:13 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-03 02:19:52 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 145.132.102.176 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 145.132.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:19:46.002080 2026] [security2:error] [pid 29892:tid 29892] [client 145.132.102.176:29696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.6"] [uri "/.git/HEAD"] [unique_id "ah-PQs_5_jSLDdzLEZZRugAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-03 00:13:42 (1 day ago)	tcp ports: 2083,2086 (4 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-03 00:09:31 (1 day ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-05-22 08:41:04 (1 week ago)	(caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:08:40:59 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:08:41:00 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:08:41:00 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:08:41:00 +0000] "GET /@fs/.env?import&raw HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:08:41:00 +0000] "GET /@fs/.env.local?import&raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 07:01:31 (1 week ago)	(caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:07:01:29 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:07:01:30 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:07:01:30 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:07:01:30 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:07:01:30 +0000] "GET /@fs/.env?import&raw HTTP/1.1" show less	Port Scan
🇹🇷 baku.hosting	2026-05-22 06:44:29 (1 week ago)	CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 145.132.102.176 (US/United Sta ... show more CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 145.132.102.176 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 06:28:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 145.132.102.176 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 145.132.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 02:28:52.250747 2026] [security2:error] [pid 16681:tid 16681] [client 145.132.102.176:46081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctrussell.us"] [uri "/config/.env"] [unique_id "ag_3pCSP1PQSYd8Sqc10BQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-22 04:58:37 (1 week ago)	(caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.132.102.176 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:04:58:32 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:04:58:33 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:04:58:33 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:04:58:33 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 145.132.102.176 - - [22/May/2026:04:58:33 +0000] "GET /@fs/.env?import&raw HTTP/1.1" show less	Port Scan
🇳🇱 homeshowdomain.nl	2026-04-16 21:59:35 (1 month ago)	Auto-ban: >3000 req/min op 2026-04-16	Web App Attack SSH Hacking
Anonymous	2026-04-16 05:05:01 (1 month ago)	suspicious request in access.log	Web App Attack
🇺🇸 xmission.com	2026-04-09 01:22:39 (1 month ago)	Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 168.144.75.68

🇺🇸 38.132.109.165

🇬🇧 193.176.29.6

🇷🇺 176.120.22.113

🇩🇪 165.245.248.211

🇺🇸 164.92.106.15

🇺🇸 162.216.149.145

🇺🇸 147.185.132.226

🇺🇸 142.248.80.49

🇳🇱 89.21.67.167

🇳🇱 89.21.67.160

🇷🇴 80.94.95.83

🇳🇱 45.148.10.151

🇳🇱 45.66.35.21

🇭🇰 43.132.227.251

🇷🇺 37.77.150.67

🇮🇪 34.245.66.135

🇫🇷 2001:41d0:33d:9200::408

🇺🇸 162.216.150.77

🇮🇳 152.52.227.94