JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.194.215

172.182.194.215 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 32%: ?

32%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.194.215

Whois 172.182.194.215

IP Abuse Reports for 172.182.194.215:

This IP address has been reported a total of 31 times from 24 distinct sources. 172.182.194.215 was first reported on September 18th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 iamxorum	2026-06-10 22:09:39 (2 weeks ago)	2026-06-10T22:09:38.226516+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-10T22:09:38.226516+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=172.182.194.215 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=36232 DF PROTO=TCP SPT=48517 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-10 20:30:37 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.182.194.215 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.182.194.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 16:30:33.783424 2026] [security2:error] [pid 19465:tid 19480] [client 172.182.194.215:48519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.86"] [uri "/.git/HEAD"] [unique_id "ainJaVRl1uWIgcvzgT53mgAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-06-10 20:16:46 (2 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 ISPLtd	2026-06-10 19:19:38 (2 weeks ago)	Jun 10 16:19:37 172.182.194.215 TCP SPT=48590 DPT=2087 SYN Jun 10 16:19:37 172.182.194.215 TCP SPT=4 ... show more Jun 10 16:19:37 172.182.194.215 TCP SPT=48590 DPT=2087 SYN Jun 10 16:19:37 172.182.194.215 TCP SPT=48587 DPT=8080 SYN Jun 10 16:19:37 172.182.194.215 TCP SPT=48574 DPT=2086 ... show less	Port Scan
Anonymous	2026-06-10 18:04:40 (2 weeks ago)	PORT & IP Scan.	Port Scan Brute-Force
🇨🇳 ThreatBook.io	2026-05-10 00:13:40 (1 month ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/172.182.194.215 2026-05-09 04: ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/172.182.194.215 2026-05-09 04:10:06 /status show less	Web App Attack
🇯🇵 demonsword	2026-05-07 21:05:56 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fapi.binance.com:443 show less	Open Proxy Port Scan
🇯🇵 jay hung	2026-04-30 11:59:54 (1 month ago)	2026-04-30T11:59:47.261424+00:00 quarktech kernel: [3628664.150642] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-04-30T11:59:47.261424+00:00 quarktech kernel: [3628664.150642] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=172.182.194.215 DST=172.237.29.33 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=42112 DPT=443 WINDOW=0 RES=0x00 RST URGP=0 ... show less	Port Scan
🇺🇸 pduggusa	2026-03-06 03:46:30 (3 months ago)	Detected attacking dugganusa.com at 2026-03-06T03:46:30.322Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-03-06T03:46:30.322Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-03-06 02:44:41 (3 months ago)	Detected attacking dugganusa.com at 2026-03-06T02:44:41.404Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-03-06T02:44:41.404Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-03-06 01:35:03 (3 months ago)	Detected attacking dugganusa.com at 2026-03-06T01:35:03.533Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-03-06T01:35:03.533Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 RAP	2026-01-20 20:01:58 (5 months ago)	2026-01-20 20:01:58 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇳🇱 StopAbuse	2026-01-20 19:22:53 (5 months ago)	tcp/2083	Port Scan
🇦🇹 centurion	2026-01-20 18:48:08 (5 months ago)	Unauthorized attempt on siem [8443/tcp] Source port: 6144 TTL: 228 Packet length: 40 TOS: 0x00 https ... show more Unauthorized attempt on siem [8443/tcp] Source port: 6144 TTL: 228 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-01-20 18:43:23 (5 months ago)	tcp/2087	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.123

🇨🇴 181.235.233.230

🇧🇷 177.190.72.210

🇺🇸 147.185.132.63

🇺🇸 142.147.182.167

🇨🇳 115.190.216.185

🇧🇩 103.151.104.78

🇺🇸 20.49.0.100

🇺🇸 12.154.188.66

🇷🇸 2a04:b540:3000:1::ac

🇭🇺 193.68.57.43

🇸🇾 188.133.73.177

🇺🇸 162.216.150.195

🇳🇱 91.92.40.233

🇳🇱 91.92.40.44

🇩🇪 69.5.169.244

🇮🇳 49.36.220.232

🇺🇦 46.201.247.21

🇳🇱 45.148.10.152

🇴🇲 37.40.224.218