JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.213.68

172.182.213.68 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 53%: ?

53%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.213.68

Whois 172.182.213.68

IP Abuse Reports for 172.182.213.68:

This IP address has been reported a total of 20 times from 17 distinct sources. 172.182.213.68 was first reported on November 18th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-06-17 04:13:46 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇩🇪 iRaphi05	2026-06-07 13:40:00 (1 week ago)	Honeypot detection: GET request on /.git/HEAD \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 1 ... show more Honeypot detection: GET request on /.git/HEAD \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 show less	Hacking Web App Attack
🇮🇹 clamehost.it	2026-06-07 11:59:55 (1 week ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇯🇵 VXG-NET	2026-06-07 10:28:28 (1 week ago)	port=80, indicator_type=info-leak	Hacking
🇦🇷 Bruno	2026-06-07 09:37:13 (1 week ago)	Port Scanner: 172.182.213.68	Port Scan
🇺🇸 kosada.com	2026-06-07 08:34:22 (1 week ago)	Web vulnerability probing: /.env.production (bogus vhost/SNI)	Web App Attack
🇺🇸 Gabriel Camargo	2026-06-07 08:32:52 (1 week ago)	172.182.213.68 - - [07/Jun/2026:03:32:50 -0500] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 ( ... show more 172.182.213.68 - - [07/Jun/2026:03:32:50 -0500] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 172.182.213.68 - - [07/Jun/2026:03:32:51 -0500] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 172.182.213.68 - - [07/Jun/2026:03:32:51 -0500] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-07 08:29:51 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 172.182.213.68 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 172.182.213.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 04:29:47.565949 2026] [security2:error] [pid 31204:tid 31204] [client 172.182.213.68:6980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.167"] [uri "/.git/HEAD"] [unique_id "aiUr-wegTF7Q2t9vhGzzNAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gu-alvareza	2026-06-07 07:05:19 (1 week ago)	HTPasswd.Access	Brute-Force
Anonymous	2026-06-04 20:24:36 (2 weeks ago)	Aggressive web scan	Web App Attack
🇯🇵 SentinalX by uzumaru	2026-05-18 02:24:01 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-09 14:30:31 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: example.com:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-05-01 23:50:24 (1 month ago)	172.182.213.68 - - [01/May/2026:18:49:25 -0500] "CONNECT ctf.themctf.com:443 HTTP/1.1" 502 488 "-" " ... show more 172.182.213.68 - - [01/May/2026:18:49:25 -0500] "CONNECT ctf.themctf.com:443 HTTP/1.1" 502 488 "-" "-" 172.182.213.68 - - [01/May/2026:18:49:26 -0500] "\x16\x03\x01" 400 392 "-" "-" 172.182.213.68 - - [01/May/2026:18:49:49 -0500] "CONNECT ctf.themctf.com:443 HTTP/1.1" 502 488 "-" "-" 172.182.213.68 - - [01/May/2026:18:49:49 -0500] "\x16\x03\x01" 400 392 "-" "-" 172.182.213.68 - - [01/May/2026:18:50:18 -0500] "CONNECT ctf.themctf.com:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇯🇵 demonsword	2026-05-01 23:49:20 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ctf.themctf.com:443 show less	Open Proxy Port Scan
🇺🇸 jormaster3k	2026-01-28 01:12:11 (4 months ago)	Attack against Apache (too many 404s)	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 130.211.104.254

🇹🇼 111.70.9.143

🇨🇳 110.185.173.167

🇫🇷 85.217.140.18

🇺🇸 66.132.186.232

🇳🇱 45.148.10.240

🇮🇳 43.248.153.132

🇹🇿 41.93.28.12

🇧🇪 35.240.97.62

🇸🇪 2400:cb00:1031:1000:5dba:31a2:e976:af28

🇰🇷 211.107.217.244

🇷🇺 193.232.29.184

🇺🇸 162.254.36.150

🇺🇸 150.107.38.209

🇨🇳 139.210.171.206

🇧🇹 103.133.216.202

🇷🇺 95.188.68.96

🇲🇾 49.124.153.61

🇨🇳 39.78.142.77

🇬🇧 3.8.165.106