JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.213.11

172.182.213.11 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 25%: ?

25%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.213.11

Whois 172.182.213.11

IP Abuse Reports for 172.182.213.11:

This IP address has been reported a total of 10 times from 9 distinct sources. 172.182.213.11 was first reported on June 9th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 CrystalMaker	2026-06-09 20:13:41 (1 month ago)	Vulnerability scan - POST /___proxy_subdomain_whm/login/?login_only=1; GET /___proxy_subdomain_whm/l ... show more Vulnerability scan - POST /___proxy_subdomain_whm/login/?login_only=1; GET /___proxy_subdomain_whm/login/ show less	Hacking
🇺🇸 MPL	2026-06-09 19:39:32 (1 month ago)	tcp port scan (16 or more attempts)	Port Scan
🇧🇾 lns.bz	2026-06-09 19:16:11 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 18:33:09 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.213.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.213.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:33:03.055426 2026] [security2:error] [pid 14631:tid 14631] [client 172.182.213.11:51134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/.git/HEAD"] [unique_id "aihcXxo_gmybbL0ftmg50QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ISPLtd	2026-06-09 18:32:37 (1 month ago)	Jun 9 12:32:36 172.182.213.11 TCP SPT=49983 DPT=2086 SYN Jun 9 12:32:36 172.182.213.11 TCP SPT=499 ... show more Jun 9 12:32:36 172.182.213.11 TCP SPT=49983 DPT=2086 SYN Jun 9 12:32:36 172.182.213.11 TCP SPT=49941 DPT=8443 SYN Jun 9 12:32:36 172.182.213.11 TCP SPT=50108 DPT=2087 WIND ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-09 18:13:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 172.182.213.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.213.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:12:56.406270 2026] [security2:error] [pid 17830:tid 17830] [client 172.182.213.11:50218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.184"] [uri "/.git/HEAD"] [unique_id "aihXqFaRsPaYPC7KwgyJ7wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 16:57:54 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 helios.live	2026-06-09 16:53:48 (1 month ago)	2026/06/09 16:53:44 [error] 3859705#3859705: 292379 access forbidden by rule, client: 172.182.213.1 ... show more 2026/06/09 16:53:44 [error] 3859705#3859705: 292379 access forbidden by rule, client: 172.182.213.11, server: 163.123.204.218, request: "GET /.git/HEAD HTTP/1.1", host: "163.123.204.218" 2026/06/09 16:53:44 [error] 3859705#3859705: 292380 access forbidden by rule, client: 172.182.213.11, server: 163.123.204.218, request: "GET /.git/config HTTP/1.1", host: "163.123.204.218" 2026/06/09 16:53:45 [error] 3859705#3859705: 292381 access forbidden by rule, client: 172.182.213.11, server: 163.123.204.218, request: "GET /.env HTTP/1.1", host: "163.123.204.218" 2026/06/09 16:53:46 [error] 3859705#3859705: 292384 access forbidden by rule, client: 172.182.213.11, server: 163.123.204.218, request: "GET /.env.production HTTP/1.1", host: "163.123.204.218" 2026/06/09 16:53:47 [error] 3859705#3859705: 292386 access forbidden by rule, client: 172.182.213.11, server: 163.123.204.218, request: "GET /.env.backup HTTP/1.1", host: "163.123.204.218" ... show less	Web App Attack
🇺🇸 markawes	2026-06-09 16:40:21 (1 month ago)	[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 172.182.213.1 ... show more [SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence: 172.182.213.11 - - [09/Jun/2026:16:40:19 +0000] "GET /.git/HEAD HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 172.182.213.11 - - [09/Jun/2026:16:40:19 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack Port Scan
🇬🇧 djboddington	2026-06-09 16:33:37 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.235.235.248

🇺🇸 147.185.132.121

🇺🇸 138.197.204.198

🇨🇳 101.126.91.34

🇺🇸 66.249.74.101

🇺🇸 54.174.58.240

🇨🇳 222.222.168.9

🇺🇸 205.210.31.42

🇲🇾 165.154.147.69

🇺🇸 154.92.23.155

🇲🇴 125.31.4.70

🇸🇬 107.155.56.52

🇩🇪 87.106.211.149

🇧🇷 45.181.112.117

🇺🇸 205.210.31.57

🇸🇬 188.166.225.116

🇨🇴 186.85.240.112

🇪🇨 186.66.81.223

🇵🇱 176.53.159.197

🇫🇮 147.185.133.197