JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.144.141.127

72.144.141.127 was found in our database!

This IP was reported 288 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.144.141.127

Whois 72.144.141.127

IP Abuse Reports for 72.144.141.127:

This IP address has been reported a total of 288 times from 176 distinct sources. 72.144.141.127 was first reported on August 27th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-01 20:08:34 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-01 00:19:28 (10 months ago)	[Mon Sep 01 00:19:27.285481 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.12 ... show more [Mon Sep 01 00:19:27.285481 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.127:4848] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:19:27.320348 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.127:4848] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:19:27.337306 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.127:4848] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:19:27.359550 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.127:4848] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:19:27.376095 2025] [proxy_fcgi:error] [pid 1414247:tid 1414247] [client 72.144.141.127:4848] AH01071: Got error 'Primary script unknown' ... show less	Hacking
🇬🇧 Andrew	2025-09-01 00:07:14 (10 months ago)	72.144.141.127 - - [01/Sep/2025:00:07:11 +0000] "GET /.alf.php HTTP/1.1" 404 5659 "-" "-" 72.144.141 ... show more 72.144.141.127 - - [01/Sep/2025:00:07:11 +0000] "GET /.alf.php HTTP/1.1" 404 5659 "-" "-" 72.144.141.127 - - [01/Sep/2025:00:07:12 +0000] "GET /.bod/.ll/ss.php HTTP/1.1" 404 3674 "-" "-" 72.144.141.127 - - [01/Sep/2025:00:07:12 +0000] "GET /aa.php HTTP/1.1" 404 3665 "-" "-" 72.144.141.127 - - [01/Sep/2025:00:07:12 +0000] "GET /about.php HTTP/1.1" 404 3668 "-" "-" 72.144.141.127 - - [01/Sep/2025:00:07:12 +0000] "GET /admin.php HTTP/1.1" 404 3668 "-" "-" 72.144.141.127 - - [01/Sep/2025:00:07:12 +0000] "GET /akc.php HTTP/1.1" 404 3666 "-" "-" ... show less	Hacking Web App Attack
🇦🇺 2000cn.com.au	2025-08-31 23:13:39 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
Anonymous	2025-08-31 23:03:23 (10 months ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇦🇹 Pingger Shikkoken	2025-08-31 22:21:03 (10 months ago)	2025-08-31T22:21:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-08-31T22:21:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=72.144.141.127 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=11738 DF PROTO=TCP SPT=1429 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-08-31T22:21:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=72.144.141.127 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=11739 DF PROTO=TCP SPT=1429 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-08-31T22:21:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=72.144.141.127 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=11740 DF PROTO=TCP SPT=1429 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇫🇷 Quarks Solutions	2025-08-31 21:56:51 (10 months ago)	crowdsecurity/http-admin-interface-probing	Hacking Web App Attack
🇩🇪 Mykola Spesivtsev	2025-08-31 21:55:53 (10 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.alf.php, Method:GET, UA:N/A	Port Scan Bad Web Bot Web App Attack
Anonymous	2025-08-31 21:50:56 (10 months ago)	PARMACOM WEBEXPLOIT 72.144.141.127 (72.144.141.127)	Web App Attack
🇺🇸 nekoify	2025-08-31 21:08:37 (10 months ago)	IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientAS ... show more IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: DE clientIP: 72.144.141.127 clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /makeasmtp.php clientRequestQuery: datetime: 2025-08-31T21:08:37Z rayName: 977f8113fce63804 ruleId: bot_fight_mode userAgent: . show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 nekoify	2025-08-31 21:08:37 (10 months ago)	IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientAS ... show more IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientASNDescription: MICROSOFT-CORP-MSN-AS-BLOCK clientCountryName: DE clientIP: 72.144.141.127 clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /wp-admin/ clientRequestQuery: datetime: 2025-08-31T21:08:37Z rayName: 977f8114eb3ddb9f ruleId: bot_fight_mode userAgent: . show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-08-31 21:00:40 (10 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 72. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 72.144.141.127 (DE/Germany/-) show less	Brute-Force
🇬🇧 Mendip_Defender	2025-08-31 20:51:43 (10 months ago)	72.144.141.127 - - [31/Aug/2025:21:51:24 +0100] "GET /.alf.php HTTP/1.0" 404 206 "-" "-" 72.144.141. ... show more 72.144.141.127 - - [31/Aug/2025:21:51:24 +0100] "GET /.alf.php HTTP/1.0" 404 206 "-" "-" 72.144.141.127 - - [31/Aug/2025:21:51:24 +0100] "GET /.bod/.ll/ss.php HTTP/1.0" 404 1234 "-" "-" 72.144.141.127 - - [31/Aug/2025:21:51:24 +0100] "GET /aa.php HTTP/1.0" 404 206 "-" "-" ... show less	Hacking Web App Attack
🇩🇪 Skyrider	2025-08-31 20:32:21 (10 months ago)	72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /.alf.php HTTP/2.0" 404 8508 "-" "-" 72.144.141 ... show more 72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /.alf.php HTTP/2.0" 404 8508 "-" "-" 72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /.bod/.ll/ss.php HTTP/2.0" 404 8515 "-" "-" 72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /aa.php HTTP/2.0" 404 8505 "-" "-" 72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /about.php HTTP/2.0" 404 8508 "-" "-" 72.144.141.127 - - [31/Aug/2025:22:32:21 +0200] "GET /admin.php HTTP/2.0" 404 8507 "-" "-" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 288 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.26.177.216

🇧🇬 91.92.47.53

🇵🇱 89.68.245.7

🇿🇦 41.242.163.15

🇰🇷 211.223.107.86

🇳🇱 104.28.217.140

🇺🇸 98.184.227.61

🇷🇺 94.41.141.36

🇪🇪 77.239.126.9

🇱🇹 62.60.130.219

🇸🇬 47.79.51.51

🇰🇷 1.234.27.159

🇨🇳 222.186.160.199

🇨🇳 220.180.166.214

🇮🇹 188.14.63.17

🇰🇷 158.179.167.115

🇹🇭 125.25.219.95

🇨🇳 115.229.253.115

🇳🇱 91.92.42.52

🇺🇸 66.132.172.32