JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.183.94.132

172.183.94.132 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.183.94.132

Whois 172.183.94.132

IP Abuse Reports for 172.183.94.132:

This IP address has been reported a total of 18 times from 14 distinct sources. 172.183.94.132 was first reported on December 31st 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Som1ght3n	2026-06-18 09:56:29 (6 days ago)	The IP address attempted to access sensitive files such as '/.git/HEAD', indicating a reconnaissance ... show more The IP address attempted to access sensitive files such as '/.git/HEAD', indicating a reconnaissance attempt against the web application. show less	Hacking
🇩🇪 palla89	2026-06-18 09:21:12 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 172.183.94.132 (US/United States/-)	SQL Injection
🇭🇰 sandra361	2026-06-18 09:12:22 (6 days ago)	Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidenc ... show more Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidence: GHOST_SCAN: IN=eth0 SRC=172.183.94.132 LEN=60 TOS=0x14 PREC=0x00 TTL=41 ID=48928 DF PROTO=TCP SPT=45399 DPT=2077 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-18 08:29:24 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.183.94.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.183.94.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:29:21.689743 2026] [security2:error] [pid 29843:tid 29843] [client 172.183.94.132:44995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.4"] [uri "/.git/HEAD"] [unique_id "ajOsYW744GQe5y1oGfZw3gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-06-18 07:47:29 (6 days ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-06-18 06:47:38 (6 days ago)	Blocked by UFW (TCP on 2096) Source port: 44125 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2096) Source port: 44125 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 172.183.94.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-18 06:44:48 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 172.183.94.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.183.94.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:44:41.762412 2026] [security2:error] [pid 11019:tid 11019] [client 172.183.94.132:44130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.33"] [uri "/.git/HEAD"] [unique_id "ajOT2Tb5MdZk_nJsMrUw8gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 gtheo99	2026-06-18 04:56:00 (6 days ago)	(cpanel) Failed cPanel login from 172.183.94.132 (US/United States/-): 2 in the last 900 secs	Brute-Force Web App Attack
🇯🇵 demonsword	2026-06-07 13:28:16 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ptlogin.4399.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-14 21:17:21 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: proof.ovh.net:443 show less	Open Proxy Port Scan
Anonymous	2026-04-18 00:05:36 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-09 22:01:06 (2 months ago)	Auto-ban: >3000 req/min op 2026-04-09	Web App Attack SSH Hacking
Anonymous	2026-04-09 15:44:48 (2 months ago)	Logfile match	Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-08 22:00:51 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-07. show less	Web App Attack SSH Hacking
🇮🇩 Burayot	2026-04-07 04:22:56 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.183.94.132 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.183.94.132 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.56

🇺🇸 195.184.76.246

🇬🇧 195.96.139.16

🇵🇰 119.156.139.206

🇫🇷 91.196.152.12

🇳🇱 45.148.10.157

🇬🇧 216.226.76.30

🇭🇳 179.49.114.203

🇳🇱 172.71.182.247

🇺🇸 151.241.122.108

🇫🇷 141.94.170.164

🇸🇬 118.194.234.8

🇫🇷 91.196.152.220

🇫🇷 91.196.152.11

🇺🇸 82.39.109.201

🇦🇺 40.82.214.8

🇺🇸 18.189.74.1

🇲🇦 196.92.7.249

🇺🇸 195.184.76.201

🇭🇰 123.58.215.102