185.82.72.182
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- LayerSwitch B.V.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS206092
- Domain Name
- expressvpn.com
- Country
- 🇳🇱 Netherlands
- City
- The Hague, South Holland
Abuse Reports
Total reports
187 from
83 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Banned by Fail2Ban on server
|
Web App Attack | |
| Anonymous |
Credential Stuffing attacks against Microsoft 365
|
Brute-Force | |
| 🇨🇭 Origon |
|
Web App Attack | |
| 🇳🇱 Alt255 |
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.82.72.182 - - [19/Sep/2026:13:44:32 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 505 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| 🇯🇵 ki3 |
Fail2Ban: Web App Attacks and Forum Spam 185.82.72.182 1789654138.0(JST)
|
Web Spam Bad Web Bot Web App Attack | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: HTTP (1 total hits)
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇫🇷 Octopuce |
Aggressive web search of vulnerable pages: /wp-includes/woocommerce-call.php /wp-content/plugins/file-upload-types/assets/css/403x.php /wp-cont ...
|
Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[24/Aug/2026:21:17:23 +0300] -- 185.82.72.182 Ban reason: User-Agent Go-http-client
|
Bad Web Bot Web App Attack | |
| 🇸🇪 vaia.cloud |
crowdsecurity/http-admin-interface-probing
|
Brute-Force Web App Attack | |
| 🇸🇪 vaia.cloud |
crowdsecurity/http-probing
|
Brute-Force Web App Attack | |
| 🇩🇪 marten_o |
185.82.72.182 - - [23/Aug/2026:05:30:09 +0200] "GET /tmp/nlx987.php HTTP/1.1" 500 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 380 772
...
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443
|
Open Proxy Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown