JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.212.56

172.182.212.56 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 57%: ?

57%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.212.56

Whois 172.182.212.56

IP Abuse Reports for 172.182.212.56:

This IP address has been reported a total of 66 times from 27 distinct sources. 172.182.212.56 was first reported on March 31st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-02 20:47:20 (1 week ago)	tcp port scan (8 or more attempts)	Port Scan
🇹🇭 Sawasdee	2026-06-02 18:37:36 (1 week ago)	Port Scan ...	Port Scan
🇬🇧 PeravixGroup	2026-06-02 18:25:03 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇯🇵 nhawsjones	2026-06-02 18:15:33 (1 week ago)	[Wed Jun 03 03:15:32.402305 2026] [authz_core:error] [pid 1135773:tid 140687593670336] [client 172.1 ... show more [Wed Jun 03 03:15:32.402305 2026] [authz_core:error] [pid 1135773:tid 140687593670336] [client 172.182.212.56:16175] AH01630: client denied by server configuration: /var/www/html/server-status ... show less	Brute-Force
🇺🇸 MPL	2026-06-02 18:14:55 (1 week ago)	tcp port scan (16 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 18:11:22 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 14:11:15.160335 2026] [security2:error] [pid 22087:tid 22087] [client 172.182.212.56:16140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.5"] [uri "/.git/HEAD"] [unique_id "ah8cw_WXioi6rOQhtg0yDAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-06-02 18:10:21 (1 week ago)	TSEC Honeypot Network report. Threat score: 74/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 74/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 172. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 RAP	2026-06-02 17:58:41 (1 week ago)	2026-06-02 17:58:41 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇨🇦 Read.Team	2026-06-02 17:49:15 (1 week ago)	Automated report: repeat offender across honeypot, portscan, and brute force systems. Score: 8	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 17:09:04 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.182.212.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.212.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:08:57.752322 2026] [security2:error] [pid 5633:tid 5633] [client 172.182.212.56:16334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.199"] [uri "/.git/config"] [unique_id "ah8OKRmN1XF1WKS4oUFymgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2026-06-02 16:28:48 (1 week ago)	172.182.212.56 - - [02/Jun/2026:11:28:45 -0500] "GET /.env.production HTTP/1.1" 404 197 "-" "Mozilla ... show more 172.182.212.56 - - [02/Jun/2026:11:28:45 -0500] "GET /.env.production HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.182.212.56 - - [02/Jun/2026:11:28:46 -0500] "GET /.env.backup HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.182.212.56 - - [02/Jun/2026:11:28:48 -0500] "GET /wp-config.php HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Brute-Force SSH
Anonymous	2026-06-02 15:56:14 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 Asthriona	2026-03-31 21:49:17 (2 months ago)	Mar 31 23:45:45 Ina sshd[2084401]: Failed password for root from 172.182.212.56 port 24398 ssh2 Mar ... show more Mar 31 23:45:45 Ina sshd[2084401]: Failed password for root from 172.182.212.56 port 24398 ssh2 Mar 31 23:47:30 Ina sshd[2084466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.182.212.56 user=root Mar 31 23:47:32 Ina sshd[2084466]: Failed password for root from 172.182.212.56 port 24390 ssh2 Mar 31 23:49:14 Ina sshd[2084556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.182.212.56 user=root Mar 31 23:49:16 Ina sshd[2084556]: Failed password for root from 172.182.212.56 port 24389 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-03-31 21:44:50 (2 months ago)	Mar 31 21:44:48 scw-6657dc sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Mar 31 21:44:48 scw-6657dc sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.182.212.56 user=root Mar 31 21:44:48 scw-6657dc sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.182.212.56 user=root Mar 31 21:44:49 scw-6657dc sshd[19655]: Failed password for root from 172.182.212.56 port 24397 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇱 185.18.191.78

🇳🇱 144.31.158.144

🇻🇳 116.110.11.157

🇸🇬 101.47.159.125

🇷🇴 80.94.92.168

🇨🇭 37.120.213.13

🇺🇸 23.234.100.20

🇪🇸 193.24.235.69

🇺🇸 154.16.112.232

🇺🇸 147.185.132.75

🇬🇧 35.203.211.31

🇬🇧 194.74.196.10

🇮🇳 183.82.111.224

🇫🇷 164.68.103.226

🇺🇸 162.216.149.185

🇮🇳 122.179.142.139

🇸🇪 90.228.229.182

🇪🇸 87.219.114.141

🇩🇪 64.226.126.224

🇬🇧 35.203.211.242