JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.208.125.192

172.208.125.192 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 64%: ?

64%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.208.125.192

Whois 172.208.125.192

IP Abuse Reports for 172.208.125.192:

This IP address has been reported a total of 19 times from 17 distinct sources. 172.208.125.192 was first reported on May 17th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gu-alvareza	2026-06-03 07:05:29 (2 weeks ago)	Spring.Boot.Actuator.Unauthorized.Access	Brute-Force
🇳🇱 Savvii	2026-06-03 06:54:37 (2 weeks ago)	15 attempts against mh-modsecurity-ban on ceres	Brute-Force Web App Attack
🇬🇧 Andrew	2026-06-03 06:14:05 (2 weeks ago)	Blocked by UFW (TCP on port 2087). Source port: 34562 TTL: 108 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 2087). Source port: 34562 TTL: 108 Packet length: 40 TOS: 0x00 This report (for 172.208.125.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dpsbs	2026-06-03 05:42:55 (2 weeks ago)	url scanning on multiple public ips detected	Bad Web Bot
🇵🇱 webadmin	2026-06-03 05:31:41 (2 weeks ago)		Web App Attack
🇺🇸 xmission.com	2026-06-03 05:19:36 (2 weeks ago)	Blocked by UFW (TCP on 8080) Source port: 34203 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8080) Source port: 34203 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 172.208.125.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-03 05:16:24 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-03 04:57:47 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.208.125.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.208.125.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:57:42.966554 2026] [security2:error] [pid 18073:tid 18073] [client 172.208.125.192:33904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.140"] [uri "/.git/HEAD"] [unique_id "ah-0Rm5nyoCYHuMi7kifAAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 04:18:58 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 172.208.125.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 172.208.125.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:18:50.915452 2026] [security2:error] [pid 5561:tid 5561] [client 172.208.125.192:34569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.175"] [uri "/.git/HEAD"] [unique_id "ah-rKqSsiVuryoP3mOAxsgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-06-03 03:54:05 (2 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-03 03:53:27.125 \|	Web App Attack
🇬🇧 PeravixGroup	2026-06-03 03:25:58 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-06-02 06:47:15 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 essinghigh	2026-06-02 06:00:24 (2 weeks ago)	IPS Detection: 172.208.125.192 -> DPT: 2087	Port Scan
🇺🇸 ISPLtd	2026-06-02 05:11:08 (2 weeks ago)	Jun 2 02:11:07 172.208.125.192 TCP SPT=64512 DPT=2087 SYN Jun 2 02:11:07 172.208.125.192 TCP SPT=6 ... show more Jun 2 02:11:07 172.208.125.192 TCP SPT=64512 DPT=2087 SYN Jun 2 02:11:07 172.208.125.192 TCP SPT=64512 DPT=2082 SYN Jun 2 02:11:07 172.208.125.192 TCP SPT=64512 DPT=2083 ... show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-06-02 04:51:20 (2 weeks ago)	Unauthorized connection to proxy port 8080	Port Scan Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.125

🇧🇦 185.65.107.14

🇳🇱 176.65.139.242

🇳🇱 176.65.139.88

🇧🇷 170.80.48.16

🇺🇸 107.167.34.125

🇧🇩 103.86.198.253

🇩🇪 69.5.169.222

🇬🇧 213.166.84.49

🇧🇴 181.188.176.242

🇺🇸 172.217.36.217

🇺🇸 145.223.7.12

🇧🇷 144.22.238.238

🇻🇳 103.179.172.233

🇳🇱 89.248.173.217

🇷🇴 80.94.92.166

🇺🇸 77.73.14.243

🇩🇪 69.5.169.137

🇺🇸 64.62.197.160

🇺🇸 64.62.156.179