JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.184.219.166

172.184.219.166 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.184.219.166

Whois 172.184.219.166

IP Abuse Reports for 172.184.219.166:

This IP address has been reported a total of 38 times from 29 distinct sources. 172.184.219.166 was first reported on October 15th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 boxed-it	2026-06-29 21:15:35 (1 day ago)	GET /.git/HEAD (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇹🇷 Threat.live	2026-06-28 11:35:05 (2 days ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 Dominik Lysiak	2026-06-28 11:21:15 (2 days ago)	172.184.219.166 - - [28/Jun/2026:13:21:08 +0200] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 172.184.219.166 - - [28/Jun/2026:13:21:08 +0200] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 172.184.219.166 - - [28/Jun/2026:13:21:10 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" 172.184.219.166 - - [28/Jun/2026:13:21:15 +0200] "GET /.git/logs/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇿 Countryman	2026-06-28 11:20:47 (2 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇫🇷 Rom74	2026-06-28 10:33:50 (2 days ago)	[Sun Jun 28 12:33:45.948145 2026] [security2:error] [pid 485560:tid 127191857735360] [client 172.184 ... show more [Sun Jun 28 12:33:45.948145 2026] [security2:error] [pid 485560:tid 127191857735360] [client 172.184.219.166:31048] [client 172.184.219.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "86.205.229.132"] [uri "/.git/HEAD"] [unique_id "akD4iY_cpQp3CZICk3ForAAAABQ"] [Sun Jun 28 12:33:46.891155 2026] [security2:error] [pid 485560:tid 127192906233536] [client 172.184.219.166:31052] [client 172.184.219.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exce ... show less	Web App Attack
🇫🇮 [email protected]	2026-06-28 09:33:26 (3 days ago)	Attack attempt against Interwebbi servers; Port Scan detected from 172.184.219.166 (US/United Stat ... show more Attack attempt against Interwebbi servers; Port Scan detected from 172.184.219.166 (US/United States/-). 5 hits in the last 125 seconds; IP: 172.184.219.166; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇺🇸 xmission.com	2026-06-28 09:09:45 (3 days ago)	Blocked by UFW (TCP on 2087) Source port: 31042 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2087) Source port: 31042 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 172.184.219.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 dwmosaics	2026-06-28 08:53:13 (3 days ago)	"GET /.git/config HTTP/1.1" 301 551 "-" "Mozilla/5.0 (Macintosh; Intel Mac ...	Brute-Force Web App Attack
🇺🇸 Mainpine	2026-06-28 08:50:31 (3 days ago)	probing for vulnerable web apps	Web App Attack
🇳🇱 Francisco Vallejo	2026-06-28 07:50:47 (3 days ago)	172.184.219.166 - - [28/Jun/2026:09:50:45 +0200] "GET /.env.local HTTP/1.1" 404 496 "-" "Mozilla/5.0 ... show more 172.184.219.166 - - [28/Jun/2026:09:50:45 +0200] "GET /.env.local HTTP/1.1" 404 496 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force SSH
Anonymous	2026-06-28 06:22:44 (3 days ago)	2026-06-28T06:22:43.838430+00:00 caddy caddy[63377]: {"level":"info","ts":1782627763.8383102,"logger ... show more 2026-06-28T06:22:43.838430+00:00 caddy caddy[63377]: {"level":"info","ts":1782627763.8383102,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"172.184.219.166","remote_port":"31171","client_ip":"172.184.219.166","proto":"HTTP/1.1","method":"GET","host":"142.132.232.19","uri":"/.git/HEAD","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"],"Connection":["close"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.00007548,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.232.19/.git/HEAD"],"Content-Type":[]}} ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 12:40:24 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 172.184.219.166 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.219.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 08:40:20.305730 2026] [security2:error] [pid 14396:tid 14396] [client 172.184.219.166:10594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.27"] [uri "/.git/HEAD"] [unique_id "aj_EtMP2l1fDXZ5fqITbLgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 11:30:37 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 172.184.219.166 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.184.219.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:30:34.079894 2026] [security2:error] [pid 22968:tid 22968] [client 172.184.219.166:10576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/.git/HEAD"] [unique_id "aj-0Wis8TdyvzBRTpPA4QAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-06-27 11:25:06 (3 days ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-06-27 11:24:47.790 \|	Web App Attack
🇳🇱 tpjg	2026-06-27 10:36:09 (3 days ago)	Automated: 15 requests with error status in 120s window from 172.184.219.166. Evidence: /.env.develo ... show more Automated: 15 requests with error status in 120s window from 172.184.219.166. Evidence: /.env.development:301,/.env_production:301,/.env.docker:301,/.env.bak:301,/.env.old:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.git/index:301,/.git/refs/heads/main:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/config:301,/.git/HEAD:301 show less	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.72.255.90

🇺🇸 162.240.35.200

🇮🇶 151.244.154.184

🇿🇦 102.66.144.177

🇷🇴 92.118.39.14

🇺🇿 84.54.86.250

🇺🇸 66.132.172.188

🇮🇩 43.129.44.66

🇳🇱 193.176.31.207

🇬🇧 193.163.125.71

🇦🇿 185.146.112.162

🇳🇵 182.93.71.239

🇧🇴 179.60.116.188

🇧🇷 177.102.161.148

🇰🇬 176.123.225.59

🇧🇩 103.147.106.1

🇸🇬 43.160.245.79

🇺🇸 38.141.62.191

🇺🇸 20.65.193.89

🇬🇧 213.166.84.39