JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.146.6.63

72.146.6.63

Neutral Activity

145 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇮🇹 Italy

City

Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

72.146.6.63 has been reported 145 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 72.146.6.63:

This IP address has been reported a total of 145 times from 124 distinct sources. 72.146.6.63 was first reported on April 9th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:02:46 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ecs.ge	2026-04-16 22:51:30 (4 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 Holger	2026-04-15 07:04:08 (4 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇭🇺 NyaljBe	2026-04-12 06:17:00 (4 months ago)	72.146.6.63 - - [09/Apr/2026:17:32:44 +0200] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - ... show more 72.146.6.63 - - [09/Apr/2026:17:32:44 +0200] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:44 +0200] "GET /dass.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /byp8.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /wp-conflg.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /ws73.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /wssw.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /oo.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /sa.php7 HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /vaza.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /yawa.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - - [09/Apr/2026:17:32:43 +0200] "GET /mh.php HTTP show less	Web App Attack
🇷🇴 andreighitan	2026-04-11 19:00:00 (4 months ago)	Coordinated cyberattack April 11-12 2026. Webshell scanning. Server: 84.46.253.134	Port Scan Hacking Web App Attack
Anonymous	2026-04-11 06:12:19 (4 months ago)	Suspicious activity detected in web server access logs	Web App Attack
Anonymous	2026-04-10 13:04:09 (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-04-10 05:14:14 (5 months ago)	166 attacks on PHP URLs: GET /ws77.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2026-04-10 04:07:32 (5 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇭🇺 DumaNet	2026-04-09 22:08:00 (5 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 09. 16:27:28 Source IP: 72.146 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 09. 16:27:28 Source IP: 72.146.6.63 Portion of the log(s): 72.146.6.63 - [09/Apr/2026:16:27:26 +0200] "GET /admin/index.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:26 +0200] "GET /drhunthq.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:26 +0200] "GET /tool.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:26 +0200] "GET /nw.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /public/wp-blog.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /install.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /ajax.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:27:25 +0200] "GET /lib.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇺🇸 Charlesiv	2026-04-09 22:01:03 (5 months ago)	Triggered Cloudflare WAF (botFight) from IT. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CO ... show more Triggered Cloudflare WAF (botFight) from IT. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /ws77.php Timestamp: 2026-04-09T18:03:22Z Ray ID: 9e9b6d969c3a3dba UA: Empty string show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-04-09 21:59:25 (5 months ago)	Auto-ban: >3000 req/min op 2026-04-09	Web App Attack SSH Hacking
🇭🇺 DumaNet	2026-04-09 21:33:00 (5 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 09. 16:15:55 Source IP: 72.146 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Apr 09. 16:15:55 Source IP: 72.146.6.63 Portion of the log(s): 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /bolt.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /callback.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /gfd.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /bgymj.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /wp-blog-header.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /ws49.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /b.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /byypas.php HTTP/1.1" 404 153 "-" "-" 72.146.6.63 - [09/Apr/2026:16:15:55 +0200] "GET /fs.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇮🇹 abuseiphack	2026-04-09 20:17:28 (5 months ago)	Automatic report for brute force attack	Web App Attack
🇺🇸 lavnet.net	2026-04-09 20:10:47 (5 months ago)	72.146.6.63 - - [09/Apr/2026:20:10:46 +0000] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 404 4702 "-" "-" 72.1 ... show more 72.146.6.63 - - [09/Apr/2026:20:10:46 +0000] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 404 4702 "-" "-" 72.146.6.63 - - [09/Apr/2026:20:10:46 +0000] "GET /public/ws49.php HTTP/1.1" 404 2050 "-" "-" 72.146.6.63 - - [09/Apr/2026:20:10:46 +0000] "GET /public/ws49.php HTTP/1.1" 404 2050 "-" "-" 72.146.6.63 - - [09/Apr/2026:20:10:47 +0000] "GET /gifclass.php HTTP/1.1" 404 2050 "-" "-" 72.146.6.63 - - [09/Apr/2026:20:10:47 +0000] "GET /gifclass.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 221.241.56.90

🇵🇦 200.46.151.238

🇺🇸 192.227.84.178

🇷🇺 188.128.63.114

🇿🇦 169.239.180.214

🇺🇸 162.216.149.154

🇪🇬 156.218.249.143

🇺🇸 147.185.132.141

🇲🇾 113.23.225.9

🇧🇬 109.160.32.98

🇻🇳 103.154.63.88

🇮🇩 103.20.219.5

🇮🇩 101.255.17.235

🇺🇦 91.225.162.241

🇲🇹 46.11.7.197

🇧🇷 45.236.242.200

🇳🇱 45.148.10.152

🇸🇬 34.177.96.46

🇦🇺 34.151.187.67

🇮🇩 34.101.191.234