JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.32.107.172

194.32.107.172 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 85%: ?

85%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Gigahost AS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56655
Domain Name	gigahost.no
Country	🇳🇴 Norway
City	Sandefjord, Vestfold

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.32.107.172

Whois 194.32.107.172

IP Abuse Reports for 194.32.107.172:

This IP address has been reported a total of 132 times from 53 distinct sources. 194.32.107.172 was first reported on January 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-05-07 03:31:13 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: egrul.nalog.ru:443 show less	Open Proxy Port Scan
Anonymous	2026-05-06 04:02:34 (4 weeks ago)	2026-05-05 19:00:27,247 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 2026-05- ... show more 2026-05-05 19:00:27,247 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 2026-05-05 22:00:24,833 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 2026-05-06 01:00:24,367 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 2026-05-06 04:00:32,739 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 2026-05-06 07:02:32,990 fail2ban.actions [3625835]: NOTICE [tor] Ban 194.32.107.172 show less	Brute-Force
🇦🇺 oncord	2026-05-05 04:52:19 (4 weeks ago)	Form spam	Web Spam
Anonymous	2026-05-05 01:08:05 (4 weeks ago)	Sending spam-mails via forms/direct PHP Execution/SQL injection from email:[email protected]	Email Spam Bad Web Bot
🇯🇵 demonsword	2026-05-03 16:00:43 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: dpc8dvxsgy3qp.cloudfront.net:80 show less	Open Proxy Port Scan
🇨🇿 ddw	2026-05-02 09:08:59 (1 month ago)	WordPress XMLRPC.PHP Access Attempt.	Hacking Web App Attack
🇺🇸 xmission.com	2026-04-29 01:51:48 (1 month ago)	Blocked by UFW (TCP on 6881) Source port: 33302 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 33302 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 194.32.107.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-04-28 17:07:01 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: egrul.nalog.ru:443 show less	Open Proxy Port Scan
🇺🇸 Ar1s	2026-04-25 19:29:31 (1 month ago)	[1:2520000] ET TOR Known Tor Exit Node Traffic ::: Port: 80/TCP	Exploited Host
Anonymous	2026-04-24 21:02:42 (1 month ago)	2026-04-24 12:00:27,729 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 2026-04-24 ... show more 2026-04-24 12:00:27,729 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 2026-04-24 15:00:25,882 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 2026-04-24 18:00:27,497 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 2026-04-24 21:00:36,753 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 2026-04-25 00:02:41,416 fail2ban.actions [7718]: NOTICE [tor] Ban 194.32.107.172 show less	Brute-Force
🇫🇮 nNordic	2026-04-24 07:12:54 (1 month ago)	Connection attempt blocked by IDS/IPS from 194.32.107.172/32	Hacking
🇫🇷 cityhunter_rhone	2026-04-23 20:17:28 (1 month ago)	Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=datacenter ... show more Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=5 \| events=1 \| decision=datacenter \| actions=fail2ban failed plesk-panel \| last_seen=2026-04-23 22:11:54 show less	Brute-Force SSH Web App Attack
🇩🇪 FeG Deutschland	2026-04-23 16:46:34 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-04-23 13:24:01 (1 month ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-21 00:40:11 (1 month ago)	ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/194.32.107.172 20 ... show more ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/194.32.107.172 2026-04-20 05:14:51 / 2026-04-20 05:14:58 https://d3azdm1q0gvo54.cloudfront.net/ 2026-04-20 05:14:52 / 2026-04-20 05:15:05 http://d3azdm1q0gvo54.cloudfront.net/ 2026-04-20 05:14:56 /robots.txt 2026-04-20 05:14:59 http://d3azdm1q0gvo54.cloudfront.net/ 2026-04-20 05:14:55 /favicon.ico 2026-04-20 05:14:57 / show less	Web App Attack

Showing 31 to 45 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.49

🇳🇱 45.153.34.181

🇯🇵 8.209.208.241

🇩🇪 194.88.98.92

🇦🇷 186.158.228.2

🇧🇩 116.204.231.251

🇬🇷 85.75.98.236

🇷🇴 81.196.204.80

🇺🇸 68.183.49.121

🇺🇸 66.132.224.17

🇨🇳 180.213.44.242

🇺🇸 154.197.57.214

🇿🇦 102.36.140.204

🇩🇪 69.5.169.63

🇮🇶 65.20.230.220

🇬🇧 64.227.35.65

🇱🇹 45.227.254.170

🇺🇸 204.57.30.205

🇩🇴 201.229.170.51

🇳🇱 185.242.226.97