JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.183.149.72

172.183.149.72 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 54%: ?

54%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.183.149.72

Whois 172.183.149.72

IP Abuse Reports for 172.183.149.72:

This IP address has been reported a total of 91 times from 62 distinct sources. 172.183.149.72 was first reported on April 21st 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-30 20:10:01 (3 weeks ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=2082,2083,2086,2087,443,80,8080,8443	Port Scan Hacking
🇺🇸 NXTwoThou	2026-06-30 20:02:17 (3 weeks ago)	/___proxy_subdomain_whm/login/%3Flogin_only=1	Web App Attack
🇭🇰 sandra361	2026-06-30 19:36:22 (3 weeks ago)	Port scan detected: 7 attempts across 7 ports (2082,2086,2087,443,80,8080,8443). \| Evidence: GHOST_S ... show more Port scan detected: 7 attempts across 7 ports (2082,2086,2087,443,80,8080,8443). \| Evidence: GHOST_SCAN: IN=eth0 SRC=172.183.149.72 LEN=60 TOS=0x14 PREC=0x00 TTL=41 ID=15166 DF PROTO=TCP SPT=40483 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-30 19:19:03 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.183.149.72 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.183.149.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:18:56.057662 2026] [security2:error] [pid 31343:tid 31343] [client 172.183.149.72:40642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.95"] [uri "/.git/config"] [unique_id "akQWoAsjvlGY9i43J2S8LQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-30 18:40:14 (3 weeks ago)	2026-06-30 18:40:14 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-06-30 18:31:25 (3 weeks ago)	Blocked by ModSec and CSF	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-30 18:09:41 (3 weeks ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Web Attack)	Web App Attack Port Scan Hacking
🇺🇸 micropedro	2026-06-24 04:02:34 (4 weeks ago)	3 incidents: malicious activity. First: 2026-06-09 22:30, Last: 2026-06-24 00:02 UTC. Triggers: ufw- ... show more 3 incidents: malicious activity. First: 2026-06-09 22:30, Last: 2026-06-24 00:02 UTC. Triggers: ufw-repeater. show less	Port Scan
🇺🇸 micropedro	2026-06-24 04:02:34 (4 weeks ago)	4 incidents: malicious activity. First: 2026-06-16 23:30, Last: 2026-06-24 00:02 UTC. Triggers: ufw- ... show more 4 incidents: malicious activity. First: 2026-06-16 23:30, Last: 2026-06-24 00:02 UTC. Triggers: ufw-repeater. show less	Port Scan
Anonymous	2026-06-16 10:29:45 (1 month ago)	Portscan: TCP/2078, TCP/2083, TCP/2087, TCP/2082, TCP/2077, TCP/2096, TCP/2095, TCP/80, TCP/443, TCP ... show more Portscan: TCP/2078, TCP/2083, TCP/2087, TCP/2082, TCP/2077, TCP/2096, TCP/2095, TCP/80, TCP/443, TCP/2086 show less	Port Scan
🇫🇷 guillaume illien	2026-06-16 02:52:00 (1 month ago)	172.183.149.72 - - [16/Jun/2026:02:51:52 +0000] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Mozilla/5.0 ( ... show more 172.183.149.72 - - [16/Jun/2026:02:51:52 +0000] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.183.149.72 - - [16/Jun/2026:02:51:53 +0000] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 172.183.149.72 - - [16/Jun/2026:02:51:54 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 172.183.149.72 - - [16/Jun/2026:02:51:55 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.183.149.72 - - [16/Jun/2026:02:51:56 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.183.149.72 - - [16/Jun/2026:02:51:58 +0000] "GET /.env.backup HTTP/1.1" 301 178 "-" "Mozilla/5 ... show less	Hacking Brute-Force Web App Attack SSH
🇬🇧 Artelis	2026-06-16 02:24:34 (1 month ago)	172.183.149.72 - - [16/Jun/2026:02:24:33 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macin ... show more 172.183.149.72 - - [16/Jun/2026:02:24:33 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack
🇩🇪 Roper123	2026-06-16 02:11:11 (1 month ago)	Web exploits	Web App Attack
🇹🇭 Sawasdee	2026-06-16 00:36:12 (1 month ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 MPL	2026-06-16 00:21:13 (1 month ago)	tcp port scan (20 or more attempts)	Port Scan

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.69

🇺🇸 162.216.149.28

🇫🇮 147.185.133.203

🇺🇸 66.175.213.4

🇨🇳 14.103.109.71

🇬🇧 5.252.83.81

🇸🇬 5.223.69.5

🇬🇧 2a06:4880:c000::f6

🇭🇰 199.45.154.147

🇺🇦 194.156.249.154

🇳🇱 185.2.80.253

🇭🇰 152.32.212.226

🇮🇳 113.193.234.210

🇺🇸 98.188.47.132

🇵🇹 89.153.125.230

🇩🇪 69.5.169.241

🇩🇪 65.111.25.110

🇦🇷 45.162.20.211

🇩🇪 213.209.159.223

🇹🇭 203.150.107.244