JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.182.117.155

2.182.117.155 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 48%: ?

48%

ISP	mokhaberat khorasan razavi
Usage Type	Fixed Line ISP
ASN	AS58224
Domain Name	ito.gov.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Mashhad, Razavi Khorasan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.182.117.155

Whois 2.182.117.155

IP Abuse Reports for 2.182.117.155:

This IP address has been reported a total of 7 times from 7 distinct sources. 2.182.117.155 was first reported on July 18th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-19 22:45:00 (4 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 security.rdmc.fr	2026-07-19 06:30:26 (4 days ago)	Port Scan Attack proto:TCP src:33794 dst:23	Port Scan
🇵🇱 Kitki30.com	2026-07-19 05:22:51 (4 days ago)	Entered Telnet Tarpit (endlessh). Log: 2026-07-19T05:22:51.131Z ACCEPT host=::ffff:2.182.117.155 por ... show more Entered Telnet Tarpit (endlessh). Log: 2026-07-19T05:22:51.131Z ACCEPT host=::ffff:2.182.117.155 port=43754 fd=163 n=307/4096 show less	IoT Targeted Port Scan Brute-Force
🇺🇸 pcprincipal8752	2026-07-19 05:11:23 (4 days ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
Anonymous	2026-07-19 01:42:51 (5 days ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇩🇪 Admins@FBN	2026-07-19 00:15:56 (5 days ago)	FW-PortScan: Traffic Blocked srcport=55662 dstport=23	Port Scan
🇩🇪 guldkage	2026-07-18 23:21:15 (5 days ago)	Unauthorized connection attempt detected from IP address 2.182.117.155 to port 23 (ger-02) [TELNET]	Exploited Host

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.15.149.254

🇹🇼 198.235.24.120

🇹🇼 198.235.24.94

🇳🇱 91.92.42.81

🇸🇬 84.75.155.220

🇱🇹 81.30.98.44

🇻🇪 74.118.62.207

🇺🇸 45.194.67.26

🇸🇬 43.156.228.27

🇺🇸 20.163.15.206

🇨🇳 218.0.63.25

🇲🇽 189.167.93.190

🇧🇷 187.120.22.208

🇸🇬 172.253.211.22

🇰🇷 113.59.150.123

🇹🇼 106.1.10.110

🇫🇷 88.191.144.56

🇺🇸 74.134.82.176

🇺🇸 74.125.186.94

🇺🇸 67.227.215.64