JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.15.72.238

45.15.72.238 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Biterika Grupp LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35048
Domain Name	biterika.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.15.72.238

Whois 45.15.72.238

IP Abuse Reports for 45.15.72.238:

This IP address has been reported a total of 17 times from 10 distinct sources. 45.15.72.238 was first reported on January 10th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-15 22:35:47 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1 ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" show less	Bad Web Bot Web App Attack
🇬🇧 Steve	2025-04-15 05:23:24 (1 year ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
Anonymous	2024-09-30 03:03:44 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-26 11:41:49 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-28 21:57:12 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 SI META	2024-05-15 14:14:00 (2 years ago)	Brute force On Microsoft 365	Brute-Force
🇺🇸 VSM Networks	2024-02-22 21:39:34 (2 years ago)	Credential Stuffing	Brute-Force
🇫🇷 www.unitiz.com	2023-11-29 02:41:16 (2 years ago)	Spam contact form	Phishing Web Spam
🇫🇷 www.unitiz.com	2023-03-16 16:55:44 (3 years ago)	Spam contact form	Phishing Web Spam
🇺🇸 VSM Networks	2022-09-30 23:38:25 (3 years ago)	Credential Stuffing	Brute-Force
🇬🇧 Al_K	2022-09-30 19:16:10 (3 years ago)	Brute force attack using Azure Portal	Brute-Force
🇺🇸 tradenet	2022-02-02 07:23:51 (4 years ago)	45.15.72.238 - - [02/Feb/2022:06:18:54 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [02/Feb/2022:06:18:54 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:04 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:06 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:08 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:10 -0600] "POST /wp-login.php?action=register HTTP/ ... show less	Bad Web Bot Web App Attack
🇺🇸 tradenet	2022-02-01 07:17:29 (4 years ago)	45.15.72.238 - - [01/Feb/2022:06:07:37 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [01/Feb/2022:06:07:37 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:47 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:49 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:51 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:53 -0600] "POST ... show less	Bad Web Bot Web App Attack
🇺🇸 tradenet	2022-02-01 03:33:04 (4 years ago)	45.15.72.238 - - [01/Feb/2022:02:28:12 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [01/Feb/2022:02:28:12 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:25 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:27 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:29 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:31 -0600] "POST ... show less	Bad Web Bot Web App Attack
🇩🇪 emha.koeln	2022-01-16 13:48:32 (4 years ago)	v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:47:47 +0100] "POST /wp-login.php HTTP/1.0" 200 ... show more v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:47:47 +0100] "POST /wp-login.php HTTP/1.0" 200 2655 "https://www.rv-horrem.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 1263 8255 v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:48:05 +0100] "POST /xmlrpc.php HTTP/1.1" 200 210 "https://www.rv-horrem.de/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 2006 5575 v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:48:13 +0100] "POST /xmlrpc.php HTTP/1.1" 200 210 "https://www.rv-horrem.de/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 11043 5575 show less	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 157.48.255.51

🇺🇸 20.221.68.115

🇭🇰 199.45.154.114

🇺🇸 157.245.1.7

🇫🇷 146.70.194.246

🇳🇱 86.54.31.34

🇱🇹 81.30.98.142

🇸🇬 2406:da18:1c64:800:f8a1:5461:c31f:e8b8

🇭🇰 203.9.150.238

🇺🇸 154.64.241.188

🇫🇮 147.185.133.234

🇬🇧 62.64.132.86

🇦🇪 5.107.26.73

🇮🇩 172.232.239.54

🇺🇸 96.85.181.245

🇮🇪 52.169.217.131

🇳🇱 45.148.10.152

🇨🇭 209.99.188.147

🇺🇸 172.69.34.140

🇩🇪 167.94.146.52