JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.184.174.117

172.184.174.117 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 35%: ?

35%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.184.174.117

Whois 172.184.174.117

IP Abuse Reports for 172.184.174.117:

This IP address has been reported a total of 11 times from 8 distinct sources. 172.184.174.117 was first reported on April 6th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-18 17:01:10 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.184.174.117 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.174.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 13:01:07.271971 2026] [security2:error] [pid 24168:tid 24174] [client 172.184.174.117:39684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.82"] [uri "/.git/HEAD"] [unique_id "ajQkU8xnHHPTkkg8x6wzVwAAAQQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 OptimusGO	2026-06-18 15:50:59 (1 week ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-18 16:50:59 UTC Log evidence: 06/18/2026-16:50:58.135593 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.184.174.117:39814 -> 185.127.18.66:2083 06/18/2026-16:50:58.130998 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 172.184.174.117:39810 -> 185.127.18.66:2087 show less	Port Scan Brute-Force
🇺🇸 RogueAutomata	2026-06-18 15:36:46 (1 week ago)	Detected malicious request: GET /.git/HEAD Detections triggered: Environment/config probe Access vi ... show more Detected malicious request: GET /.git/HEAD Detections triggered: Environment/config probe Access via IP addr (v4) show less	Web App Attack
Anonymous	2026-06-18 12:52:56 (1 week ago)	172.184.174.117 - - [18/Jun/2026:12:52:49 +0000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ... show more 172.184.174.117 - - [18/Jun/2026:12:52:49 +0000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" 172.184.174.117 - - [18/Jun/2026:12:52:52 +0000] "GET /.git/logs/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" 172.184.174.117 - - [18/Jun/2026:12:52:54 +0000] "GET /.git/refs/heads/master HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" "-" 172.184.174.117 - - [18/Jun/2026:12:52:55 +0000] "GET /.git/refs/heads/main HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" "-" 172.184.174.117 - - [18/Jun/2026:12:52:56 +0000] "GET /.git/index HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" ... show less	Port Scan Brute-Force
Anonymous	2026-06-18 12:38:24 (1 week ago)	Port Scan	Port Scan
🇷🇴 abuse_IP_reporter	2026-06-18 11:45:06 (1 week ago)	Jun 18 14:17:18 server UFW BLOCK SRC=172.184.174.117 DF PROTO=TCP SPT=39625	Port Scan
Anonymous	2026-05-22 02:11:37 (1 month ago)	(PERMBLOCK) 172.184.174.117 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ... show more (PERMBLOCK) 172.184.174.117 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-22 01:07:36 (1 month ago)	(caddyscan) Scanner path probe from 172.184.174.117 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.184.174.117 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:01:07:32 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:01:07:32 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:01:07:32 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:01:07:32 +0000] "GET /@fs/.env?import&raw HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:01:07:32 +0000] "GET /@fs/.env.local?import&raw HTTP/1.1" show less	Port Scan
Anonymous	2026-05-22 00:06:42 (1 month ago)	(caddyscan) Scanner path probe from 172.184.174.117 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 172.184.174.117 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:00:06:40 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:00:06:40 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:00:06:40 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:00:06:40 +0000] "GET /@fs/.env?import&raw HTTP/1.1" [REDACTED] 200 2627 172.184.174.117 - - [22/May/2026:00:06:40 +0000] "GET /@fs/.env.local?import&raw HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-21 23:21:27 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.184.174.117 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.174.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 19:21:19.699918 2026] [security2:error] [pid 3682:tid 3682] [client 172.184.174.117:50113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mantality.com"] [uri "/.env"] [unique_id "ag-Tb5M9SoWYAQxR7l7bkQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-04-06 18:08:03 (2 months ago)	172.184.174.117 - - [06/Apr/2026:13:07:50 -0500] "CONNECT h2.dstat.love:443 HTTP/1.1" 502 488 "-" "- ... show more 172.184.174.117 - - [06/Apr/2026:13:07:50 -0500] "CONNECT h2.dstat.love:443 HTTP/1.1" 502 488 "-" "-" 172.184.174.117 - - [06/Apr/2026:13:07:51 -0500] "\x16\x03\x01" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:6800:4000:1017::127

🇨🇳 222.176.200.87

🇬🇧 193.176.29.2

🇵🇦 190.34.234.86

🇪🇸 172.233.117.214

🇺🇸 165.154.173.226

🇭🇰 152.32.214.226

🇷🇺 128.0.140.11

🇨🇳 123.145.15.49

🇰🇷 115.68.208.117

🇩🇪 69.5.169.201

🇺🇸 68.32.91.38

🇮🇹 51.179.112.6

🇱🇹 45.227.254.170

🇳🇱 45.148.10.157

🇦🇺 45.132.225.193

🇮🇳 43.250.158.15

🇺🇸 13.90.206.6

🇺🇸 2604:a940:301:225:0:f::

🇺🇸 209.141.41.212