JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

72.146.12.114

Activity Trending Down

Abuse Confidence Score

10% Caution

13 reports

7 reporters · latest 2 weeks ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇹 Italy
City: Milan, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 7 distinct reporters

First reported

August 19th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇮🇹 Italy 1

Most common categories Web App Attack 2 Brute-Force 1 SSH 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-10-27 23:35:16 UTC · (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-10-26 17:07:03 UTC · (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 emernetsrl	2026-10-18 16:57:49 UTC · (3 weeks ago)	2026-10-18T18:57:49.059637+02:00 pve sshd-session[573109]: banner exchange: Connection from 72.146.12.114 port 49608: invalid format 2026-10-18T18:57:49.060231+02:00 pve sshd-session[573108]: banner exchange: Connection from 72.146.12.114 port 49648: ... show more 2026-10-18T18:57:49.059637+02:00 pve sshd-session[573109]: banner exchange: Connection from 72.146.12.114 port 49608: invalid format 2026-10-18T18:57:49.060231+02:00 pve sshd-session[573108]: banner exchange: Connection from 72.146.12.114 port 49648: invalid format ... show less	Brute-Force SSH
🇮🇹 emernetsrl	2026-09-06 01:55:20 UTC · (2 months ago)	2026-09-06T03:55:19.553971+02:00 pve sshd-session[2832946]: Invalid user AZqahd from 72.146.12.114 port 45170 2026-09-06T03:55:19.692822+02:00 pve sshd-session[2832946]: Connection closed by invalid user AZqahd 72.146.12.114 port 45170 [preauth] ...	Brute-Force SSH
🇳🇴 Abuse Buster	2026-09-03 14:05:37 UTC · (2 months ago)	72.146.12.114 - - [03/Sep/2026:16:05:35 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_1_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.7827.55 Safari/537.36" ...	Web App Attack
🇳🇴 Abuse Buster	2026-09-03 10:33:46 UTC · (2 months ago)	72.146.12.114 - - [03/Sep/2026:12:33:45 +0200] "hello" 400 150 "-" "-" ...	Web App Attack
🇳🇴 Abuse Buster	2026-09-02 23:07:45 UTC · (2 months ago)	72.146.12.114 - - [03/Sep/2026:01:07:44 +0200] "hello" 400 150 "-" "-" ...	Web App Attack
🇬🇧 Abuse Buster	2026-09-02 19:17:53 UTC · (2 months ago)	Sep 2 21:17:52 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=72.146.12.114 DST=94.177.250.148 LEN=44 TOS=0x00 PREC=0x00 TTL=39 ID=14793 PROTO=TCP SPT=60852 DPT=1097 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 2 ... show more Sep 2 21:17:52 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=72.146.12.114 DST=94.177.250.148 LEN=44 TOS=0x00 PREC=0x00 TTL=39 ID=14793 PROTO=TCP SPT=60852 DPT=1097 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 21:17:52 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=72.146.12.114 DST=94.177.250.148 LEN=44 TOS=0x00 PREC=0x20 TTL=37 ID=14862 PROTO=TCP SPT=60852 DPT=9503 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 21:17:52 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=72.146.12.114 DST=94.177.250.148 LEN=44 TOS=0x00 PREC=0x20 TTL=37 ID=48428 PROTO=TCP SPT=60852 DPT=3211 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 21:17:52 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=72.146.12.114 DST=94.177.250.148 LEN=44 TOS=0x00 PREC=0x00 TTL=26 ID=50308 PROTO=TCP SPT=60852 DPT=5952 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 21:17:52 balder kernel: L ... show less	DDoS Attack
🇮🇹 abuseiphack	2026-08-29 07:09:23 UTC · (2 months ago)	Automatic report for brute force attack	Brute-Force
🇮🇹 RaffOne	2026-08-25 19:27:40 UTC · (2 months ago)	SSH - Attempt to login using invalid or illegal credential	Brute-Force SSH
🇵🇱 dzpk	2026-08-25 11:50:02 UTC · (2 months ago)	72.146.12.114 - - [25/Aug/2026:13:50:01 +0200] "GET / HTTP/1.0" 400 300 "-" "-"	Web App Attack
🇨🇿 janekCZ	2026-08-19 10:07:25 UTC · (2 months ago)	Fail2Ban report from jail 'pregreet': 2026-08-19T12:07:24.961992+02:00 mail postfix/postscreen[2198448]: PREGREET 30 after 0.02 from [72.146.12.114]:48864: EHLO mail.prazskysvazjuda.cz\r\n ...	Brute-Force SSH
🇵🇱 dzpk	2026-08-19 07:51:42 UTC · (2 months ago)	72.146.12.114 - - [19/Aug/2026:09:51:41 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2600:3c01::2000:74ff:fe8e:a006

🇸🇪 185.246.128.170

🇨🇭 185.12.44.148

🇨🇳 110.42.242.214

🇺🇸 91.230.168.91

🇳🇱 86.38.187.17

🇺🇸 20.65.219.154

🇺🇸 18.218.118.203

🇨🇳 221.231.140.136

🇧🇷 205.210.31.206

🇫🇷 163.172.66.206

🇦🇫 149.54.81.146

🇦🇫 149.54.62.162

🇮🇳 117.242.118.117

🇺🇸 37.19.66.173

🇫🇮 35.228.151.1

🇺🇸 216.218.206.94

🇺🇸 216.180.246.212

🇧🇷 177.10.104.124

🇳🇱 158.173.21.59