JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.132.102.178

145.132.102.178 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 62%: ?

62%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.132.102.178

Whois 145.132.102.178

IP Abuse Reports for 145.132.102.178:

This IP address has been reported a total of 16 times from 15 distinct sources. 145.132.102.178 was first reported on July 15th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-06-28 10:53:25 (4 days ago)	Accessed trap at '/___proxy_subdomain_whm/login/'	Web App Attack
🇳🇱 tpjg	2026-06-28 10:14:20 (4 days ago)	Automated: 15 requests with error status in 120s window from 145.132.102.178. Evidence: /.env_produc ... show more Automated: 15 requests with error status in 120s window from 145.132.102.178. Evidence: /.env_production:301,/.env.docker:301,/.env.bak:301,/.env.old:301,/.env.prod:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.env:301,/.git/refs/heads/main:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/config:301,/.git/HEAD:301 show less	Web App Attack
Anonymous	2026-06-28 10:10:05 (4 days ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-06-28 07:36:28 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 145.132.102.178 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 145.132.102.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 03:36:22.479112 2026] [security2:error] [pid 20348:tid 20348] [client 145.132.102.178:48199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.233"] [uri "/.git/HEAD"] [unique_id "akDO9kt64UeTm51Pqpc60wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-28 07:27:23 (4 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇦🇹 begou.dev	2026-06-28 06:45:44 (4 days ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/8080	Port Scan
🇩🇪 XICTRON	2026-06-28 06:45:05 (4 days ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇮🇪 Jim Keir	2026-06-28 06:19:50 (4 days ago)	2026-06-28 06:19:49 145.132.102.178 File scanning, blocking 145.132.102.178 for 5 minutes	Web App Attack
🇺🇸 sumnone	2026-06-28 05:47:47 (4 days ago)	Port probing on unauthorized port 2087	Port Scan Hacking Exploited Host
Anonymous	2026-06-28 05:38:22 (4 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇯🇵 demonsword	2026-05-04 03:09:07 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: icanhazip.com:443 show less	Open Proxy Port Scan
🇬🇧 2048	2026-04-05 01:27:02 (2 months ago)	2026-04-05T02:26:59.690833+01:00 machodeer kernel: [3609239.224057] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-04-05T02:26:59.690833+01:00 machodeer kernel: [3609239.224057] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=145.132.102.178 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8498 DF PROTO=TCP SPT=35456 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-05T02:27:00.694790+01:00 machodeer kernel: [3609240.227909] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=145.132.102.178 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8499 DF PROTO=TCP SPT=35456 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-05T02:27:01.719785+01:00 machodeer kernel: [3609241.251875] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=145.132.102.178 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=8500 DF PROTO=TCP SPT=35456 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 _ArminS_	2026-03-20 17:25:23 (3 months ago)	SP-Scan 35856:8000 detected 2026.03.20 18:25:23 blocked until 2026.05.09 12:28:10	Port Scan
🇯🇵 jay hung	2026-02-22 15:26:22 (4 months ago)	2026-02-22T15:26:19.938648+00:00 quarktech kernel: [702745.778218] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-02-22T15:26:19.938648+00:00 quarktech kernel: [702745.778218] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=145.132.102.178 DST=172.237.29.33 LEN=40 TOS=0x00 PREC=0x00 TTL=38 ID=0 DF PROTO=TCP SPT=11265 DPT=443 WINDOW=0 RES=0x00 RST URGP=0 ... show less	Port Scan
🇩🇪 2048	2026-01-04 12:33:26 (5 months ago)	2026-01-04T13:33:23.441163+01:00 machodeer.aeza.network kernel: [246954.820278] [UFW BLOCK] IN=ens3 ... show more 2026-01-04T13:33:23.441163+01:00 machodeer.aeza.network kernel: [246954.820278] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=145.132.102.178 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=8845 DF PROTO=TCP SPT=33892 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-04T13:33:24.502358+01:00 machodeer.aeza.network kernel: [246955.882297] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=145.132.102.178 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=8846 DF PROTO=TCP SPT=33892 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-01-04T13:33:25.527991+01:00 machodeer.aeza.network kernel: [246956.907375] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:f1:f1:a2:02:00:00:00:00:01:08:00 SRC=145.132.102.178 DST=92.246.136.99 LEN=60 TOS=0x08 PREC=0x20 TTL=45 ID=8847 DF PROTO=TCP SPT=33892 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.178

🇺🇸 192.169.202.129

🇦🇷 186.39.148.121

🇺🇸 165.154.172.234

🇺🇸 162.216.149.30

🇨🇳 115.190.142.147

🇺🇸 64.62.156.184

🇺🇸 57.141.0.23

🇺🇸 20.127.195.254

🇫🇷 13.140.130.75

🇨🇳 183.198.249.206

🇺🇸 172.253.214.114

🇰🇷 121.184.144.232

🇬🇧 118.26.104.212

🇮🇳 103.248.120.6

🇫🇷 91.231.89.83

🇹🇼 61.223.97.240

🇳🇱 46.8.68.144

🇧🇷 45.226.6.161

🇳🇱 45.148.10.147