JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.194.218

172.182.194.218 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 22%: ?

22%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.194.218

Whois 172.182.194.218

IP Abuse Reports for 172.182.194.218:

This IP address has been reported a total of 21 times from 15 distinct sources. 172.182.194.218 was first reported on March 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 abuse_IP_reporter	2026-08-04 20:45:05 (1 month ago)	Aug 4 23:14:26 server UFW BLOCK SRC=172.182.194.218 DF PROTO=TCP SPT=11333	Port Scan
🇺🇸 RAP	2026-08-04 19:39:37 (1 month ago)	2026-08-04 19:39:37 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇹🇷 neron	2026-08-04 19:13:53 (1 month ago)	CrowdSec blocked: local/tcp-single-host-multi-port-scan detected via OPNsense firewall	Hacking Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-08-04 18:40:12 (1 month ago)	Automated Attack === ATTACK === Service: apache-auth \| Type: Automated Attack / Bad Bot === SOURCE = ... show more Automated Attack === ATTACK === Service: apache-auth \| Type: Automated Attack / Bad Bot === SOURCE === IP: 172.182.194.218 (IPv4) \| Country: United States \| ISP: RIPE \| rDNS: None === TARGET === Host: filecloud.goline.ch === RESPONSE === Time: 2026-08-04 20:40:11 \| Action: Blocked show less	Brute-Force Bad Web Bot
🇺🇸 xmission.com	2026-08-04 18:19:24 (1 month ago)	Blocked by UFW (TCP on 2083) Source port: 11200 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2083) Source port: 11200 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 172.182.194.218) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-04 18:04:30 (1 month ago)	PORT & IP Scan.	Port Scan Brute-Force
🇳🇱 Savvii	2026-08-04 16:46:48 (1 month ago)	20 attempts against mh-misbehave-ban on storm	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-08-04 16:17:56 (1 month ago)	2026-08-04 16:17:56 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇦🇺 afleventoffice.com.au	2026-04-10 06:25:58 (5 months ago)	GET /security.txt HTTP/1.1	Web App Attack
🇮🇱 spd.co.il	2026-04-08 20:01:54 (5 months ago)	Web application attack detected	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-07 22:02:57 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06. show less	Web App Attack SSH Hacking
🇩🇪 betternews.app	2026-04-07 00:40:49 (5 months ago)	"a web request contained keyword ".git"; Suspicious URL: /.git/config"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-07 00:35:22 (5 months ago)	362 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-07 00:24:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.182.194.218 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.182.194.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 20:24:46.969507 2026] [security2:error] [pid 1213203:tid 1213203] [client 172.182.194.218:32394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ostborg.com"] [uri "/.git/config"] [unique_id "adROzs6VFkvEBqiMUAnPAgAAAAs"], referer: https://news.ycombinator.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 00:01:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 172.182.194.218 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.182.194.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 20:01:02.721626 2026] [security2:error] [pid 504705:tid 504705] [client 172.182.194.218:32660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psa.michaelpmcgrath.com"] [uri "/.git/config"] [unique_id "adRJPrIx_oPVjZgOeojgWQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.139.214.221

🇳🇱 158.94.211.70

🇻🇳 210.245.30.140

🇫🇮 147.185.133.39

🇮🇩 103.142.240.142

🇺🇸 66.132.172.214

🇭🇰 42.200.66.164

🇲🇦 196.92.7.246

🇳🇱 192.253.248.215

🇯🇵 152.32.202.95

🇨🇦 89.149.52.23

🇸🇪 88.80.20.49

🇷🇺 77.87.69.238

🇩🇪 69.5.169.139

🇺🇸 65.49.20.85

🇺🇸 63.250.36.183

🇩🇪 43.228.157.216

🇩🇿 41.111.227.10

🇷🇺 212.24.45.146

🇨🇦 209.50.187.6