JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.86.125.140

172.86.125.140 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 84%: ?

84%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.86.125.140

Whois 172.86.125.140

IP Abuse Reports for 172.86.125.140:

This IP address has been reported a total of 19 times from 16 distinct sources. 172.86.125.140 was first reported on October 20th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-10-20 16:44:13 (2 days ago)	ICMP + TCP & UDP portscan on multiple ports : Firewall: Within 2026-10-20 02:23:19 - 2026-10-20 02:2 ... show more ICMP + TCP & UDP portscan on multiple ports : Firewall: Within 2026-10-20 02:23:19 - 2026-10-20 02:23:19 CEST(+0200) identified: port scan from 172.86.125.140/32 on uncommon port/s: 5000(tcp:5000),8006(tcp:8006),2375(tcp:2375),8200(tcp:8200),9200(tcp:9200) (5 trials) Fail2ban: Within 2026-10-20 02:23:19 - 2026-10-20 02:23:19 CEST(+0200) banned: 7 times by fail2ban[firewall]; 7 times by fail2ban[recidive] show less	Port Scan Ping of Death
🇩🇪 reznekcs	2026-10-20 05:01:14 (3 days ago)	Blocked by UFW firewall	Brute-Force
🇸🇬 drewf.ink	2026-10-20 01:34:32 (3 days ago)	[01:34] Crawled recognized Elasticsearch endpoints without a follow-up attack: GET /_cat/indices, GE ... show more [01:34] Crawled recognized Elasticsearch endpoints without a follow-up attack: GET /_cat/indices, GET /_cluster/health show less	Hacking
🇫🇷 agroman93	2026-10-20 01:22:41 (3 days ago)	T-Pot honeypot: 139 hits on ports [2375, 2376, 2379, 4646, 6443, 8006, 8200, 8500, 9000, 9200] (auto ... show more T-Pot honeypot: 139 hits on ports [2375, 2376, 2379, 4646, 6443, 8006, 8200, 8500, 9000, 9200] (automated) show less	Port Scan
🇺🇸 cunning-fox	2026-10-20 01:21:33 (3 days ago)	Probing of exposed network services observed.	Hacking
🇫🇷 Kejult	2026-10-20 00:41:14 (3 days ago)	Honeypot Finding: verified TCP multi-port scan/probing; 11 application-level events across 6 target ... show more Honeypot Finding: verified TCP multi-port scan/probing; 11 application-level events across 6 target ports and 11 source port(s). Ports: 2375/service, 6443/service, 2376/service, 2379/service, 4646/service, 8006/service. Sensors: Honeytrap. show less	Port Scan
Anonymous	2026-10-20 00:40:52 (3 days ago)	172.86.125.140 detected on srv02	Port Scan
🇩🇪 cloudmax	2026-10-20 00:30:05 (3 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇷 GabrielJST	2026-10-20 00:28:52 (3 days ago)	Port Scan detected from 172.86.125.140 (US/United States/-).	Port Scan
🇺🇸 drewf.ink	2026-10-20 00:27:03 (3 days ago)	[00:27] Crawled recognized Docker endpoints without a follow-up attack: GET /version (x2), GET /cont ... show more [00:27] Crawled recognized Docker endpoints without a follow-up attack: GET /version (x2), GET /containers/json (x2) show less	Hacking
🇩🇪 phil2k	2026-10-20 00:23:21 (3 days ago)	fail2ban:firewall:2026-10-20T02:23:19.065883+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-10-20T02:23:19.065883+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=172.86.125.140 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=20843 DF PROTO=TCP SPT=40353 DPT=5000 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-20T02:23:19.065910+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=172.86.125.140 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=16044 DF PROTO=TCP SPT=40625 DPT=8006 WINDOW=65535 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇧🇷 rotabrrmds	2026-10-20 00:20:42 (3 days ago)	Automated report by Fail2Ban - jail ufw-scan	Port Scan
🇫🇷 EvoX	2026-10-20 00:19:14 (3 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 2375 GET /version User-Agent: Mozilla/5.0 (X11; ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 2375 GET /version User-Agent: Mozilla/5.0 (X11; Linux x86_64) Firefox/128.0 Accept-Encoding: identity; 2375 [1], 2376 [1], 2379 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 arqueiro	2026-10-20 00:17:55 (3 days ago)	Port scan: IP 172.86.125.140 tentou 10 portas distintas ([2375, 2379, 4646, 6443, 8006, 8200, 8500, ... show more Port scan: IP 172.86.125.140 tentou 10 portas distintas ([2375, 2379, 4646, 6443, 8006, 8200, 8500, 9000, 9200, 10250]) em 10min. show less	Port Scan
🇫🇷 sthoyer.de	2026-10-20 00:15:58 (3 days ago)	Oct 20 02:15:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 20 02:15:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=172.86.125.140 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=56 ID=10795 DF PROTO=TCP SPT=53298 DPT=8006 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 20 02:15:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=172.86.125.140 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=56 ID=20086 DF PROTO=TCP SPT=41504 DPT=4646 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 20 02:15:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=172.86.125.140 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=56 ID=57458 DF PROTO=TCP SPT=55604 DPT=8200 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 20 02:15:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=172.86.125.140 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x20 TTL=56 ID=424 DF PROTO=TCP SPT=55181 DPT=5000 WIND ... show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 155.133.203.126

🇮🇳 103.211.217.182

🇮🇳 103.178.46.4

🇨🇳 101.96.195.17

🇫🇷 85.217.140.38

🇩🇪 68.183.218.160

🇵🇱 64.176.67.46

🇺🇸 47.251.114.93

🇻🇳 45.119.81.245

🇲🇾 37.0.12.237

🇲🇾 27.125.249.218

🇲🇾 27.125.249.160

🇺🇸 23.252.112.35

🇵🇰 223.123.73.71

🇺🇸 192.252.215.125

🇺🇦 176.119.84.254

🇫🇮 170.168.31.40

🇩🇪 130.12.180.51

🇮🇩 103.174.62.19

🇻🇳 101.99.37.80