72.197.112.199
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Cox Communications
- Usage Type
- Fixed Line ISP
- ASN
- AS22773
- Hostname(s)
- ip72-197-112-199.sd.sd.cox.net
- Domain Name
- cox.com
- Country
- 🇺🇸 United States of America
- City
- San Diego, California
Abuse Reports
Total reports
6 from
5 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 kladwa |
Failed Microsoft 365 sign-in attempts. password guessing through the Azure AD PowerShell client (resource-owner password flow); none of this organization's successful sign-ins in the past 24 hours used this client
|
Brute-Force | |
| 🇮🇩 xveil |
2026-04-10T14:13:55.426258 mail-honeypot postfix/submission/smtpd[23962]: warning: ip72-197-112-199.sd.sd.cox.net[72.197.112.199]: SASL LOGIN authentication failed: authentication failure
...
|
Brute-Force | |
| 🇳🇱 exxos |
Attacks with Bad user agents
|
Hacking | |
| 🇪🇸 Global Cyber Police |
Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).
|
Port Scan Brute-Force Web App Attack | |
| 🇪🇸 Global Cyber Police |
Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).
|
Port Scan Brute-Force Web App Attack | |
| 🇸🇪 Johan Finn |
malicious activity, botnet
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown