JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.182.225.2

172.182.225.2 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 26%: ?

26%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.182.225.2

Whois 172.182.225.2

IP Abuse Reports for 172.182.225.2:

This IP address has been reported a total of 35 times from 28 distinct sources. 172.182.225.2 was first reported on August 7th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-07-01 00:44:55 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-06-20 00:04:05 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-06-17 01:40:39 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇴 gtheo99	2026-06-17 01:00:28 (3 weeks ago)	172.182.225.2 (US/United States/-), 3 distributed cpanel attacks on account [root] in the last 900 s ... show more 172.182.225.2 (US/United States/-), 3 distributed cpanel attacks on account [root] in the last 900 secs show less	SSH Brute-Force Hacking
🇩🇪 ValtonTahiri	2026-06-15 05:07:48 (4 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=172.182.225.2; proto=TCP; source_port=50268; target_port=2086; flags=ACK,RST show less	Port Scan
🇺🇸 ISPLtd	2026-06-15 04:47:29 (4 weeks ago)	Jun 14 22:47:28 172.182.225.2 TCP SPT=51253 DPT=2078 SYN Jun 14 22:47:28 172.182.225.2 TCP SPT=50692 ... show more Jun 14 22:47:28 172.182.225.2 TCP SPT=51253 DPT=2078 SYN Jun 14 22:47:28 172.182.225.2 TCP SPT=50692 DPT=2086 SYN Jun 14 22:47:28 172.182.225.2 TCP SPT=51250 DPT=2087 ... show less	Port Scan
🇺🇸 bulkvm.com	2026-06-15 02:24:40 (4 weeks ago)	[bulkvm.com/honeypot] HTTP port scan. Port: 51016, Time: 2026-06-15 02:24:28 UTC	Port Scan
🇷🇸 Scan	2026-06-15 01:35:45 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-06-15 00:46:43 (4 weeks ago)	tcp/2078	Port Scan
🇬🇧 2048	2026-05-15 03:54:15 (1 month ago)	2026-05-15T05:54:12.557050+02:00 machodeer kernel: [1525169.181021] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-15T05:54:12.557050+02:00 machodeer kernel: [1525169.181021] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=58221 DF PROTO=TCP SPT=9282 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-15T05:54:13.579051+02:00 machodeer kernel: [1525170.202801] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=58222 DF PROTO=TCP SPT=9282 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-15T05:54:14.603058+02:00 machodeer kernel: [1525171.226899] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=58223 DF PROTO=TCP SPT=9282 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇬🇧 2048	2026-04-11 13:10:27 (3 months ago)	2026-04-11T14:10:24.616395+01:00 machodeer kernel: [4169844.455253] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-04-11T14:10:24.616395+01:00 machodeer kernel: [4169844.455253] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=51331 DF PROTO=TCP SPT=59906 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-11T14:10:25.654194+01:00 machodeer kernel: [4169845.493545] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=51332 DF PROTO=TCP SPT=59906 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-11T14:10:26.679923+01:00 machodeer kernel: [4169846.517946] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=51333 DF PROTO=TCP SPT=59906 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 2048	2026-03-22 18:50:01 (3 months ago)	2026-03-22T19:49:57.942100+01:00 machodeer kernel: [2462217.086971] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-03-22T19:49:57.942100+01:00 machodeer kernel: [2462217.086971] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=61108 DF PROTO=TCP SPT=35910 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-22T19:49:58.951824+01:00 machodeer kernel: [2462218.096908] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=61109 DF PROTO=TCP SPT=35910 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-03-22T19:49:59.975526+01:00 machodeer kernel: [2462219.120859] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=172.182.225.2 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=61110 DF PROTO=TCP SPT=35910 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-03-15 01:00:37 (3 months ago)	Blocked 174 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisti ... show more Blocked 174 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇺🇸 Rayulcifer	2026-03-03 06:39:58 (4 months ago)	172.182.225.2 - - [03/Mar/2026:01:39:57 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 " ... show more 172.182.225.2 - - [03/Mar/2026:01:39:57 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" 172.182.225.2 - - [03/Mar/2026:01:39:57 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 Audir8 \| RRHosting	2026-03-01 16:26:47 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Python/3.9 aiohttp/3.10.6 This report is using Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.184.143

🇰🇷 182.222.48.233

🇵🇾 181.123.136.11

🇦🇫 149.54.62.2

🇺🇸 135.237.126.6

🇮🇩 43.157.203.234

🇺🇸 34.174.230.255

🇷🇺 31.77.78.141

🇹🇭 202.29.220.106

🇨🇳 183.208.32.67

🇸🇬 149.34.253.149

🇺🇸 109.105.210.74

🇭🇺 89.134.209.95

🇮🇩 163.7.3.154

🇫🇮 147.185.133.28

🇺🇸 147.185.132.2

🇬🇧 92.207.4.157

🇬🇧 87.236.176.142

🇬🇧 87.236.176.135

🇨🇦 70.54.182.130