JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.153.230.168

72.153.230.168 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 45%: ?

45%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.153.230.168

Whois 72.153.230.168

IP Abuse Reports for 72.153.230.168:

This IP address has been reported a total of 110 times from 60 distinct sources. 72.153.230.168 was first reported on August 25th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-28 10:37:01 (7 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 Starburst SysOp Team	2026-07-28 10:07:33 (7 hours ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 168.230.153.72.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 168.230.153.72.rbl.malware.expert succeeded at REQUEST_HEADERS:X-Forwarded-For. (1001000-nue6-2) show less	Hacking
🇺🇸 anti-res	2026-07-23 05:08:40 (5 days ago)	Attempt of unauthorized access	Port Scan Bad Web Bot Web App Attack
🇭🇺 kranem	2026-07-18 21:01:03 (1 week ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/3 (GET method) Endpoint: / Timestamp: 2026-07-18T19:31:13Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 convos	2026-07-18 00:22:22 (1 week ago)	Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ... show more Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403). show less	Web App Attack Hacking Bad Web Bot
🇩🇪 AetherFox	2026-07-12 01:28:46 (2 weeks ago)	AetherFox VoidGuard detected: [Sun Jul 12 01:28:44.218195 2026] [authz_core:error] [pid 581820:tid 5 ... show more AetherFox VoidGuard detected: [Sun Jul 12 01:28:44.218195 2026] [authz_core:error] [pid 581820:tid 581857] [client 72.153.230.168:26753] AH01630: client denied by server configuration: proxy:https://[MASKED]/, referer: https://cloud.dranet.de/login [Sun Jul 12 01:28:44.371730 2026] [authz_core:error] [pid 581820:tid 581858] [client 72.153.230.168:26752] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/impressum.html, referer: https://cloud.dranet.de/login [Sun Jul 12 01:28:44.523428 2026] [authz_core:error] [pid 581820:tid 581859] [client 72.153.230.168:26753] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php/datenschutzerklaerung.html, referer: https://cloud.dranet.de/login [Sun Jul 12 01:28:45.384406 2026] [authz_core:error] [pid 581820:tid 581860] [client 72.153.230.168:26753] AH01630: client denied by server configuration: proxy:https://[MASKED]/favicon.ico, referer: https://draconigen.ne ... show less	Bad Web Bot Web App Attack
🇨🇦 dispensight	2026-07-05 03:13:13 (3 weeks ago)	SecureLeaf CTI: recon path (ngrok-tagged). 3 req against s01-app.dispensight.ca (e.g. /favicon.ico). ... show more SecureLeaf CTI: recon path (ngrok-tagged). 3 req against s01-app.dispensight.ca (e.g. /favicon.ico). Defensive report; verified infra. show less	Port Scan
🇺🇸 CounterScrape	2026-07-05 01:00:51 (3 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-07-04 00:00:52 (3 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-07-03 00:00:49 (3 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-07-01 20:00:20 (3 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-06-30 19:01:17 (3 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-06-29 19:00:21 (4 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-06-28 18:01:03 (4 weeks ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking
🇺🇸 CounterScrape	2026-06-27 17:27:41 (1 month ago)	CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvest ... show more CounterScrape Deception: Bot identified as RESIDENTIAL_PROXY (Aggressive Web Scraping / Data harvesting bot). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 641.0 MB. show less	Hacking

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇩 196.250.95.152

🇺🇦 178.150.187.138

🇺🇦 176.36.146.80

🇨🇳 106.114.105.179

🇷🇴 92.118.39.205

🇵🇭 61.28.144.154

🇺🇸 35.146.185.132

🇫🇷 13.140.132.21

🇫🇮 185.148.3.54

🇵🇱 176.53.159.197

🇺🇸 172.70.130.171

🇩🇪 167.94.146.63

🇺🇸 162.216.150.67

🇮🇳 152.59.83.108

🇯🇵 150.66.5.133

🇫🇮 147.185.133.5

🇺🇸 147.185.132.15

🇮🇩 114.10.47.234

🇺🇦 109.200.248.6

🇫🇷 91.231.89.188