JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.144.141.63

72.144.141.63 was found in our database!

This IP was reported 340 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.144.141.63

Whois 72.144.141.63

IP Abuse Reports for 72.144.141.63:

This IP address has been reported a total of 340 times from 192 distinct sources. 72.144.141.63 was first reported on August 27th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alboweb B.V.	2026-01-29 14:22:38 (7 months ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇫🇷 GEDAL	2025-09-04 11:06:10 (1 year ago)	Fail2ban webexploits @ <hostname> : 72.144.141.63 - - [31/Aug/2025:06:59:11 +0200] "GET /wp-admin/cs ... show more Fail2ban webexploits @ <hostname> : 72.144.141.63 - - [31/Aug/2025:06:59:11 +0200] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 162 "-" "-" show less	Brute-Force SSH
🇫🇷 GEDAL	2025-09-02 20:00:17 (1 year ago)	Fail2ban webexploits @ <hostname> : 72.144.141.63 - - [31/Aug/2025:06:59:11 +0200] "GET /wp-admin/cs ... show more Fail2ban webexploits @ <hostname> : 72.144.141.63 - - [31/Aug/2025:06:59:11 +0200] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 162 "-" "-" show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-01 23:49:22 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/72.144.141.63 2025-09- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/72.144.141.63 2025-09-01 09:40:23 /aa.php 2025-09-01 09:40:23 /.bod/.ll/ss.php 2025-09-01 09:40:22 /.alf.php show less	Web App Attack
🇯🇵 stypr	2025-09-01 02:06:03 (1 year ago)	Malicious activity detected on HTTP/HTTPS	Hacking Brute-Force Web App Attack
🇺🇸 drodrig	2025-09-01 01:58:13 (1 year ago)	CrowdSec triggered: %!s(*string=0xc00bb22850) (11 events)	Brute-Force
🇵🇱 nfsec.pl	2025-09-01 01:39:31 (1 year ago)	72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /.alf.php HTTP/1.1" 403 357 "-" "-" 72.144.141.6 ... show more 72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /.alf.php HTTP/1.1" 403 357 "-" "-" 72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /.bod/.ll/ss.php HTTP/1.1" 403 357 "-" "-" 72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /aa.php HTTP/1.1" 403 357 "-" "-" 72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /about.php HTTP/1.1" 403 357 "-" "-" 72.144.141.63 - - [01/Sep/2025:03:39:30 +0200] "GET /admin.php HTTP/1.1" 403 357 "-" "-" ... show less	Exploited Host Web App Attack
🇺🇸 myagent.site	2025-09-01 01:39:23 (1 year ago)	Blocking for trying to access an exploit file: /admin.php	Hacking
Anonymous	2025-09-01 01:27:09 (1 year ago)	<comment>	Brute-Force Web App Attack
Anonymous	2025-09-01 01:16:32 (1 year ago)	[Mon Sep 01 03:16:31.327374 2025] [authz_core:error] [pid 16891] [client 72.144.141.63:4914] AH01630 ... show more [Mon Sep 01 03:16:31.327374 2025] [authz_core:error] [pid 16891] [client 72.144.141.63:4914] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 01 03:16:31.332332 2025] [authz_core:error] [pid 16891] [client 72.144.141.63:4914] AH01630: client denied by server configuration: /etc/httpd/htdocs [Mon Sep 01 03:16:31.337280 2025] [authz_core:error] [pid 16891] [client 72.144.141.63:4914] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇩🇪 Kreapptivo	2025-09-01 01:14:28 (1 year ago)	[01/Sep/2025:03:14:26 +0200] Web-Request: "GET /.alf.php", User-Agent: "-" [01/Sep/2025:03:14:26 +02 ... show more [01/Sep/2025:03:14:26 +0200] Web-Request: "GET /.alf.php", User-Agent: "-" [01/Sep/2025:03:14:26 +0200] Web-Request: "GET /.alf.php", User-Agent: "-" show less	Bad Web Bot Web App Attack
🇺🇸 CBJ	2025-09-01 01:12:07 (1 year ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇸🇪 Lemmy	2025-09-01 01:00:04 (1 year ago)	apache-noscript	Web App Attack
🇦🇺 paulshipley.com.au	2025-09-01 00:36:08 (1 year ago)	levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:34:56 +1000] "GET /.alf.php HTTP/1.1" ... show more levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:34:56 +1000] "GET /.alf.php HTTP/1.1" 404 145673 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:34:58 +1000] "GET /.bod/.ll/ss.php HTTP/1.1" 404 151593 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:01 +1000] "GET /aa.php HTTP/1.1" 404 143102 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:03 +1000] "GET /about.php HTTP/1.1" 404 143105 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:05 +1000] "GET /admin.php HTTP/1.1" 404 143105 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:08 +1000] "GET /akc.php HTTP/1.1" 404 143098 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:10 +1000] "GET /alfa.php HTTP/1.1" 404 143104 "-" "-" levellapromotions.com.au:443 72.144.141.63 - - [01/Sep/2025:10:35:13 +1000] "GET /asasx.php HTTP/1.1" 404 143105 "-" "-" levellapromotions.com.au:443 72.1 ... show less	Web App Attack
🇫🇮 Christopher Hughes	2025-08-31 23:40:05 (1 year ago)	[Mon Sep 01 00:40:04.756172 2025] [proxy_fcgi:error] [pid 3282444:tid 140346025563712] [client 72.14 ... show more [Mon Sep 01 00:40:04.756172 2025] [proxy_fcgi:error] [pid 3282444:tid 140346025563712] [client 72.144.141.63:7477] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:40:04.817977 2025] [proxy_fcgi:error] [pid 3282444:tid 140345052468800] [client 72.144.141.63:7477] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:40:04.849339 2025] [proxy_fcgi:error] [pid 3282444:tid 140346134603328] [client 72.144.141.63:7477] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:40:04.880764 2025] [proxy_fcgi:error] [pid 3282444:tid 140345102825024] [client 72.144.141.63:7477] AH01071: Got error 'Primary script unknown' [Mon Sep 01 00:40:04.919310 2025] [proxy_fcgi:error] [pid 3282444:tid 140346159781440] [client 72.144.141.63:7477] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 1 to 15 of 340 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.129

🇸🇪 185.246.128.192

🇳🇱 172.211.56.214

🇵🇭 143.44.184.108

🇸🇬 139.162.3.141

🇿🇦 102.66.182.52

🇺🇸 64.62.197.215

🇬🇧 35.203.210.25

🇹🇼 198.235.24.127

🇹🇼 198.235.24.116

🇹🇼 198.235.24.115

🇵🇭 180.191.152.73

🇺🇸 136.70.208.217

🇺🇸 91.230.168.85

🇩🇪 69.5.169.107

🇺🇸 65.75.208.14

🇰🇷 58.72.212.171

🇲🇾 49.124.146.42

🇳🇱 45.148.10.141

🇳🇱 31.14.32.7