JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.132.102.225

145.132.102.225 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.132.102.225

Whois 145.132.102.225

IP Abuse Reports for 145.132.102.225:

This IP address has been reported a total of 70 times from 52 distinct sources. 145.132.102.225 was first reported on August 24th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-23 22:26:59 (5 days ago)		Brute-Force Web App Attack
🇭🇰 sandra361	2026-06-14 19:37:21 (2 weeks ago)	Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidenc ... show more Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidence: GHOST_SCAN: IN=eth0 SRC=145.132.102.225 LEN=60 TOS=0x14 PREC=0x00 TTL=41 ID=3135 DF PROTO=TCP SPT=16067 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-14 17:51:29 (2 weeks ago)	2026-06-14T19:51:28.178140+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-14T19:51:28.178140+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=145.132.102.225 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=26497 DF PROTO=TCP SPT=16386 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-14 16:02:50 (2 weeks ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 16385 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 16385 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 SpaceHost-Server	2026-06-10 22:26:46 (2 weeks ago)		Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-06-10 05:14:30 (2 weeks ago)	8 attacks on PHP URLs: POST /wp/xmlrpc.php HTTP/1.1	Web App Attack
🇬🇧 andypiper	2026-06-10 01:00:31 (2 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-10 00:16:25 (2 weeks ago)	Xmlrpc Caught (9)	Brute-Force Web App Attack
Anonymous	2026-06-09 23:17:54 (2 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-09 22:26:22 (2 weeks ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 22:22:53 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 145.132.102.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 145.132.102.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:22:49.847755 2026] [security2:error] [pid 3721:tid 3721] [client 145.132.102.225:57845] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 145.132.102.225 (+1 hits since last alert)\|trailofcrumbs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "trailofcrumbs.com"] [uri "/wp/xmlrpc.php"] [unique_id "aiiSOW6Ga9RmKqURf0FcsQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-06-09 22:04:02 (2 weeks ago)	Brute-Force, Web App Attack, suspicious: XMLRPC Attack	Brute-Force Web App Attack
🇮🇩 Burayot	2026-06-09 22:02:01 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 145.132.102.225 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 145.132.102.225 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-06-09 22:01:24 (2 weeks ago)	(caddyscan) Scanner path probe from 145.132.102.225 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 145.132.102.225 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 213 145.132.102.225 - - [09/Jun/2026:21:55:47 +0000] "POST /xmlrpc.php HTTP/1.1" [REDACTED] 404 216 145.132.102.225 - - [09/Jun/2026:21:55:47 +0000] "POST /wp/xmlrpc.php HTTP/1.1" [REDACTED] 404 217 145.132.102.225 - - [09/Jun/2026:21:55:48 +0000] "POST /xmlrpc.php HTTP/1.1" [REDACTED] 404 220 145.132.102.225 - - [09/Jun/2026:21:55:48 +0000] "POST /wp/xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 145.132.102.225 - - [09/Jun/2026:22:01:22 +0000] "POST /xmlrpc.php HTTP/1.1" show less	Port Scan
Anonymous	2026-06-09 22:00:13 (2 weeks ago)	Scanning/Probing activity detected.	Bad Web Bot Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.186.31.66

🇮🇷 85.198.19.251

🇩🇪 47.245.138.78

🇰🇷 8.230.6.105

🇲🇾 203.121.40.210

🇲🇱 197.155.130.44

🇸🇬 193.37.32.6

🇩🇪 165.22.89.3

🇳🇵 103.86.57.108

🇸🇮 102.220.160.38

🇵🇰 101.53.233.106

🇫🇷 85.217.140.5

🇺🇸 71.6.147.254

🇩🇪 37.120.191.97

🇭🇰 193.176.211.215

🇲🇽 189.218.239.144

🇰🇿 188.130.173.146

🇨🇷 186.179.68.36

🇨🇴 181.55.23.80

🇮🇱 147.234.96.149