158.158.72.115
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Singapore Pte. Ltd.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇪🇸 Spain
- City
- Madrid, Madrid
No reports in the last 60 days
158.158.72.115 has been reported 108 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
108 from
97 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇩 David Koswari |
REQ_BLOCKED_ACL
|
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇬🇧 openstrike.co.uk |
4 attacks on ACME URLs:
GET /.well-known/acme-challenge/index.php HTTP/1.1
|
Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octascan]
|
Web App Attack | |
| Anonymous |
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent
|
Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-03-03
|
Web App Attack SSH Hacking | |
| 🇳🇱 oisecnet |
Automated report: Unauthorized vulnerability scanning detected on 2026-03-03. 13 requests from this IP.
|
Brute-Force Web App Attack SSH | |
| 🇦🇹 penguin-solutions.at |
Excessive 403/404 errors
...
|
Brute-Force Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from 4 different servers
|
Brute-Force Web App Attack | |
| 🇧🇪 voormedia |
Accessed trap at '/admin.php'
|
Web App Attack | |
| 🇩🇪 simsung |
|
Web App Attack | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 158.158.72.115 (ES/Spain/-): 1 in the last 3600 secs (0-193)
|
Hacking | |
| 🇩🇪 Hary74656 |
[Tue Mar 03 13:21:01.120691 2026] [core:info] [pid 89324:tid 89375] [client 158.158.72.115:4410] AH00128: File does not exist: /home/harald/www/wp-includes/images/wp-login.php
...
|
Bad Web Bot | |
| 🇺🇸 omc |
AH01797: Client denied unauthorized file
|
Web App Attack | |
| 🇺🇸 omc |
Blacklisted client denied access
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown