JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.195.225

172.182.195.225 was found in our database!

This IP was reported 310 times. Confidence of Abuse is 18%: ?

18%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.195.225

Whois 172.182.195.225

IP Abuse Reports for 172.182.195.225:

This IP address has been reported a total of 310 times from 104 distinct sources. 172.182.195.225 was first reported on August 16th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 kumiko	2026-06-01 03:29:15 (1 month ago)	[2026-06-01 06:29:14] Unauthorized port scan/probing (3 times on ports 2082, 2086, 8443) Blocked by ... show more [2026-06-01 06:29:14] Unauthorized port scan/probing (3 times on ports 2082, 2086, 8443) Blocked by UFW show less	Port Scan
🇩🇪 psauxit	2026-06-01 02:56:05 (1 month ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇨🇦 Blinker73	2026-06-01 02:17:39 (1 month ago)	2026-05-31T22:17 kernel: OUT= SRC=172.182.195.225 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=16986 DF ... show more 2026-05-31T22:17 kernel: OUT= SRC=172.182.195.225 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=16986 DF PROTO=TCP SPT=59328 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T22:17 kernel: OUT= SRC=172.182.195.225 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=37911 DF PROTO=TCP SPT=59328 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T22:17 kernel: OUT= SRC=172.182.195.225 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=25484 DF PROTO=TCP SPT=59328 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
Anonymous	2026-06-01 02:05:49 (1 month ago)	2026-06-01T03:05:49.090839+01:00 vps kernel: [42019718.535995] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-01T03:05:49.090839+01:00 vps kernel: [42019718.535995] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=172.182.195.225 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=12393 DF PROTO=TCP SPT=59328 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇸🇪 donarev419	2026-06-01 01:22:35 (1 month ago)	Port scan detected on port 2087 (connection without data transfer)	Port Scan
🇩🇪 ValtonTahiri	2026-05-31 23:33:00 (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=172.182.195.225; proto=TCP; source_port=59328; target_port=8080; flags=ACK,RST show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-27 09:23:27 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 172.182.195.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.182.195.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 05:23:24.030510 2026] [security2:error] [pid 12608:tid 12608] [client 172.182.195.225:38731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howelllandsllc.odessatexas.us"] [uri "/.git/config"] [unique_id "ae8rDCyFlllEQgzDhYCRKQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 KPS	2026-04-25 03:36:24 (2 months ago)	PortscanM	Port Scan
🇫🇷 Petre 21_ip	2026-04-25 02:35:45 (2 months ago)	2026-04-25T04:35:44.582372+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-04-25T04:35:44.582372+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=172.182.195.225 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=23896 PROTO=TCP SPT=45064 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-25 02:04:01 (2 months ago)	IP & Port Scan.	SSH Port Scan Brute-Force
Anonymous	2026-04-25 01:58:30 (2 months ago)	Unauthorized connection to RDP port 3389	Port Scan
Anonymous	2026-04-25 01:58:29 (2 months ago)	Port Scan	Port Scan
🇫🇮 iamxorum	2026-04-25 01:52:45 (2 months ago)	2026-04-25T01:52:45.274029+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-04-25T01:52:45.274029+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=172.182.195.225 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=49535 PROTO=TCP SPT=45064 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 centurion	2026-04-25 01:51:53 (2 months ago)	Blocked by UFW on ns03 [3389/tcp] Source port: 45064 TTL: 228 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [3389/tcp] Source port: 45064 TTL: 228 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 sbajic	2026-04-25 01:42:13 (2 months ago)	...	Brute-Force

Showing 1 to 15 of 310 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.230.149

🇬🇧 193.46.0.224

🇬🇧 193.46.0.91

🇨🇱 153.67.137.247

🇺🇸 147.185.132.75

🇺🇸 104.197.143.155

🇷🇴 92.118.39.204

🇳🇱 89.248.172.11

🇳🇱 31.76.78.140

🇧🇷 20.206.107.78

🇫🇷 2001:41d0:8:9a33::1

🇧🇪 198.235.24.228

🇬🇧 193.46.0.139

🇺🇸 173.239.240.17

🇺🇸 170.106.180.153

🇮🇩 110.136.89.172

🇮🇳 103.174.103.19

🇷🇴 80.94.92.179

🇱🇹 77.90.185.79

🇩🇪 69.5.169.56