JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.225.194

172.182.225.194 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 49%: ?

49%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.225.194

Whois 172.182.225.194

IP Abuse Reports for 172.182.225.194:

This IP address has been reported a total of 71 times from 58 distinct sources. 172.182.225.194 was first reported on February 22nd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 geot	2026-06-04 14:02:17 (2 weeks ago)	GET /wp-config.php HTTP/1.1 GET /.htpasswd HTTP/1.1 GET /.env.local HTTP/1.1 GET /.aws/credentials H ... show more GET /wp-config.php HTTP/1.1 GET /.htpasswd HTTP/1.1 GET /.env.local HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /dump.sql HTTP/1.1 GET /.env.backup HTTP/1.1 GET /.env.production HTTP/1.1 GET /config/database.yml HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /.env.save HTTP/1.1 GET /backup.sql HTTP/1.1 GET /app/config/parameters.yml HTTP/1.1 GET /.DS_Store HTTP/1.1 GET /.git/HEAD HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-03 04:14:19 (2 weeks ago)	tcp port scan (18 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-03 03:50:59 (2 weeks ago)	2026-06-03 03:50:59 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇨🇳 pengpeng	2026-06-03 02:34:39 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 2083 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-06-03 02:26:08 (2 weeks ago)	Honeypot hit: Empty payload (likely service probe); 2086 [1], 2087 [1], 2082 [1], 2083 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 2086 [1], 2087 [1], 2082 [1], 2083 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-03 02:16:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.182.225.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.182.225.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:16:20.850216 2026] [security2:error] [pid 14909:tid 14909] [client 172.182.225.194:1221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.106"] [uri "/.env.local"] [unique_id "ah-OdOHaDAC5sAdnbmFMbQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-03 01:48:11 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇷🇸 Scan	2026-06-03 00:06:08 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 big-cloud.nl	2026-06-02 23:17:40 (2 weeks ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-06-02 23:01:55 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-03-21 05:00:45 (3 months ago)	Mar 21 12:00:27 kepegawaian-2022 sshd[238486]: refused connect from 172.182.225.194 (172.182.225.194 ... show more Mar 21 12:00:27 kepegawaian-2022 sshd[238486]: refused connect from 172.182.225.194 (172.182.225.194) Mar 21 12:00:27 kepegawaian-2022 sshd[238491]: refused connect from 172.182.225.194 (172.182.225.194) Mar 21 12:00:29 kepegawaian-2022 sshd[238525]: refused connect from 172.182.225.194 (172.182.225.194) Mar 21 12:00:38 kepegawaian-2022 sshd[239507]: refused connect from 172.182.225.194 (172.182.225.194) Mar 21 12:00:40 kepegawaian-2022 sshd[239547]: refused connect from 172.182.225.194 (172.182.225.194) Mar 21 12:00:44 kepegawaian-2022 sshd[240100]: refused connect from 172.182.225.194 (172.182.225.194) ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-03-19 00:03:42 (3 months ago)	172.182.225.194 - - [18/Mar/2026:19:03:41 -0500] "CONNECT www.rainhadafacilpa.com.br:443 HTTP/1.1" 5 ... show more 172.182.225.194 - - [18/Mar/2026:19:03:41 -0500] "CONNECT www.rainhadafacilpa.com.br:443 HTTP/1.1" 502 488 "-" "-" 172.182.225.194 - - [18/Mar/2026:19:03:41 -0500] "\x16\x03\x01\x02" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2026-03-08 12:11:55 (3 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇰🇷 2048	2026-03-08 09:08:08 (3 months ago)	2026-03-08T09:08:05.633335+00:00 no2 sshd[259794]: Connection closed by authenticating user root 172 ... show more 2026-03-08T09:08:05.633335+00:00 no2 sshd[259794]: Connection closed by authenticating user root 172.182.225.194 port 50176 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4884:5000::53

🇻🇳 210.211.122.97

🇳🇱 195.178.110.30

🇸🇬 188.166.246.68

🇮🇳 103.91.246.101

🇵🇱 87.251.64.144

🇫🇷 51.68.226.87

🇧🇷 45.205.1.42

🇯🇵 20.243.208.191

🇺🇸 2604:a880:400:d1:0:4:9e97:6001

🇺🇸 2604:a880:400:d1:0:4:9e91:1

🇨🇭 209.99.189.138

🇮🇩 202.145.0.61

🇧🇷 201.81.240.66

🇬🇪 195.54.179.244

🇲🇽 189.194.140.170

🇧🇷 189.51.43.54

🇨🇴 179.32.200.247

🇳🇱 176.65.139.231

🇺🇸 165.227.209.27