JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.212.52

172.182.212.52 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 88%: ?

88%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.212.52

Whois 172.182.212.52

IP Abuse Reports for 172.182.212.52:

This IP address has been reported a total of 39 times from 25 distinct sources. 172.182.212.52 was first reported on November 18th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-02 22:50:41 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 18:50:35.643776 2026] [security2:error] [pid 6002:tid 6002] [client 172.182.212.52:41024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.208"] [uri "/.git/HEAD"] [unique_id "ah9eO3UkI4BU3Veqx2inCgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-18 08:51:05 (2 weeks ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇮🇱 spd.co.il	2026-04-08 19:01:46 (1 month ago)	Web application attack detected	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-07 22:02:50 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-04-06 23:57:34 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:57:31.829831 2026] [security2:error] [pid 504710:tid 504710] [client 172.182.212.52:40693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psa.michaelpmcgrath.com"] [uri "/.git/config"] [unique_id "adRIayjb5ZFFWAQDlpna5AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-06 23:30:33 (1 month ago)	518 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-06 23:15:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:15:43.717558 2026] [security2:error] [pid 500103:tid 500103] [client 172.182.212.52:40452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arklatexds.com"] [uri "/.git/config"] [unique_id "adQ-n6CnmWJ5WgJr_hYOUgAAAAk"], referer: https://medium.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 23:00:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:00:41.630308 2026] [security2:error] [pid 668700:tid 668700] [client 172.182.212.52:40148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cvoguemag.com"] [uri "/.git/config"] [unique_id "adQ7GYEJa4dJe-0ZuSBSuwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-06 22:08:35 (1 month ago)	[TueApr0700:08:30.3659212026][security2:error][pid371611:tid371637][client172.182.212.52:0]ModSecuri ... show more [TueApr0700:08:30.3659212026][security2:error][pid371611:tid371637][client172.182.212.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"dgtime.ch.136-243-54-122.cpanel.site\"][uri\"/@fs/etc/passwd\"][unique_id\"adQu3tQLxp3aPDs1B3_g_gAAAJc\"]\,referer:https://stackoverflow.com/ show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 22:06:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 18:06:01.386448 2026] [security2:error] [pid 475376:tid 475376] [client 172.182.212.52:40449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfateofficial.com"] [uri "/.git/config"] [unique_id "adQuSXB0pO8FdgBNDlyLZQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-06 22:02:05 (1 month ago)	Auto-ban: >3000 req/min op 2026-04-06	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-04-06 21:49:47 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 17:49:43.394145 2026] [security2:error] [pid 499422:tid 499422] [client 172.182.212.52:40543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aim-controls.com"] [uri "/.git/config"] [unique_id "adQqd9dtUfLqbC0feXjIYAAAADI"], referer: https://www.linkedin.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 21:08:42 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 17:08:34.259046 2026] [security2:error] [pid 425231:tid 425231] [client 172.182.212.52:40025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yanlidesign.com"] [uri "/.git/config"] [unique_id "adQg0jEDldiIGgKSFZFoNwAAAA8"], referer: https://github.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-04-06 21:06:39 (1 month ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇳🇿 Antinson	2026-04-06 21:05:42 (1 month ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot

Showing 16 to 30 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.227.210.218

🇺🇸 172.212.224.40

🇨🇳 124.174.44.7

🇭🇰 118.193.44.184

🇫🇷 91.231.89.172

🇺🇸 47.251.64.158

🇨🇳 220.202.112.21

🇩🇪 213.209.159.186

🇺🇸 192.241.141.144

🇩🇪 167.94.146.57

🇭🇰 152.32.252.94

🇺🇸 151.240.67.194

🇮🇳 103.195.81.146

🇮🇳 103.123.226.10

🇰🇷 49.247.37.22

🇨🇳 1.24.16.158

🇨🇳 223.166.22.166

🇳🇱 192.142.24.7

🇨🇳 182.242.168.205

🇰🇷 175.202.18.33