This IP address has been reported a total of
17
times from
13 distinct
sources.
172.182.200.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on ns02 [2078/tcp] Source port: 38914 TTL: 38 Packet length: 60 TOS: 0x00 This repor ...
show moreBlocked by UFW on ns02 [2078/tcp] Source port: 38914 TTL: 38 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(PERMBLOCK) 172.182.200.148 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ...
show more(PERMBLOCK) 172.182.200.148 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
[SatMay2316:15:35.8310442026][security2:error][pid2523248:tid2523311][client172.182.200.148:0]ModSec ...
show more[SatMay2316:15:35.8310442026][security2:error][pid2523248:tid2523311][client172.182.200.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpu-services.ch\"][uri\"/config/.env\"][unique_id\"ahG2h6-h3Eqfexbn92zyFgAAAME\"]\,referer:https://www.facebook.com/
show less
Hacking
Web App Attack
Anonymous
(caddyscan) Scanner path probe from 172.182.200.148 (US/United States/-): 5 in the last 3600 secs; P ...
show more(caddyscan) Scanner path probe from 172.182.200.148 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:13:39:41 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:13:39:41 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:13:39:41 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:13:39:41 +0000] "GET /@fs/.env?import&raw HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:13:39:41 +0000] "GET /@fs/.env.local?import&raw HTTP/1.1"
show less
Port Scan
Anonymous
(caddyscan) Scanner path probe from 172.182.200.148 (US/United States/-): 5 in the last 3600 secs; P ...
show more(caddyscan) Scanner path probe from 172.182.200.148 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:12:39:03 +0000] "GET /config/.env HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:12:39:04 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:12:39:04 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:12:39:04 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 172.182.200.148 - - [23/May/2026:12:39:04 +0000] "GET /.env HTTP/1.1"
show less
Blocked 20 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ...
show moreBlocked 20 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.
show less
Nov 30 04:31:41 Moonlgxt sshd[3433112]: Failed password for root from 172.182.200.148 port 31744 ssh ...
show moreNov 30 04:31:41 Moonlgxt sshd[3433112]: Failed password for root from 172.182.200.148 port 31744 ssh2
Nov 30 04:32:02 Moonlgxt sshd[3433362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.182.200.148 user=root
Nov 30 04:32:04 Moonlgxt sshd[3433362]: Failed password for root from 172.182.200.148 port 31744 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 17 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩