JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.252.112.172

72.252.112.172 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 28%: ?

28%

ISP	Columbus Communications Jamaica Limited
Usage Type	Fixed Line ISP
ASN	AS30689
Domain Name	j2limited.com
Country	🇯🇲 Jamaica
City	Kingston, Kingston

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.252.112.172

Whois 72.252.112.172

IP Abuse Reports for 72.252.112.172:

This IP address has been reported a total of 34 times from 24 distinct sources. 72.252.112.172 was first reported on July 30th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-04 13:10:41 (4 days ago)	[Askari] \| country=JM \| ASN=FLOW \| Behavior: Slow-read attack	Bad Web Bot DDoS Attack
🇪🇸 el-brujo	2026-06-19 23:59:05 (2 weeks ago)	Cloudflare WAF: Request Path: /diseno_grafico/acerca_de_macromedia_flash_urgente-t368355.0.html;msg1 ... show more Cloudflare WAF: Request Path: /diseno_grafico/acerca_de_macromedia_flash_urgente-t368355.0.html;msg1771207 Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: FLOW Country: JM Method: GET Timestamp: 2026-06-19T23:59:05Z ruleId: 770fb332273f47628e1c012f2ac4e3d3. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇷🇸 Smel	2026-06-19 02:10:00 (2 weeks ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇩🇪 filstal.org	2026-06-12 10:24:56 (3 weeks ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (Windows 98; Win 9x 4.90; mhr-RU; rv:1.9.1.20) Gecko/7686-04-18 04:55:47.268036 Firefox/3.8 show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-01 08:54:41 (1 month ago)	Kingcopy(AI-IDS) Report: IP 72.252.112.172 wurde nach 3 Angriffsversuchen automatisch geblockt. Patt ... show more Kingcopy(AI-IDS) Report: IP 72.252.112.172 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChooseCountrie - Vegas Cosmetics Security System show less	DDoS Attack Hacking Bad Web Bot
🇮🇹 A000Z	2026-05-11 03:15:04 (1 month ago)	Fail2Ban: 72.252.112.172 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 72.252.112.172 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 11; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-29 23:10:33 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 72.252.112.172 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 72.252.112.172 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:10:26.919470 2026] [security2:error] [pid 32171:tid 32171] [client 72.252.112.172:3617] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.silalaw.com\|F\|4"] [data "GET http://www.silalaw.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.silalaw.com"] [uri "/"] [unique_id "afKP4jaXdi0nSELIJAsVYgAAAAc"], referer: https://infoguia.com.pa/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-09 20:48:03 (3 months ago)	block ruleset SQL-Injections with typical fingerprints FD77349DE692F8D05B4EE282DE6A5198C42AB90F	SQL Injection
🇦🇺 MAGIC	2026-03-04 01:19:25 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 rtbh.com.tr	2026-03-01 20:11:49 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 gui-ying233	2026-01-28 00:34:40 (5 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇺 ZoneNet	2026-01-20 08:46:21 (5 months ago)	ddos attack	Fraud Orders
🇺🇸 rjdefrancisco	2026-01-16 08:05:31 (5 months ago)	Unwanted traffic detected by honeypot on January 15, 2026: port scans (1 port 23 scan).	Port Scan Brute-Force SSH
Anonymous	2025-12-28 22:40:41 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇦 polycoda	2025-12-04 12:12:02 (7 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4003:c19::121

🇨🇳 218.81.180.21

🇸🇬 188.166.218.48

🇺🇸 169.150.203.237

🇨🇳 123.245.84.206

🇺🇸 97.107.130.115

🇹🇷 87.232.127.53

🇦🇺 45.134.20.104

🇳🇱 43.239.90.22

🇰🇿 37.150.2.6

🇨🇦 4.239.243.30

🇧🇪 198.235.24.130

🇩🇪 185.209.196.141

🇨🇳 171.106.20.253

🇨🇮 160.120.191.213

🇩🇪 130.12.181.98

🇺🇸 103.195.100.207

🇹🇷 81.8.21.221

🇺🇸 72.238.149.59

🇺🇸 64.225.115.106