JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.15.72.238

45.15.72.238 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Biterika Grupp LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35048
Domain Name	biterika.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.15.72.238

Whois 45.15.72.238

IP Abuse Reports for 45.15.72.238:

This IP address has been reported a total of 17 times from 10 distinct sources. 45.15.72.238 was first reported on January 10th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-15 22:35:47 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1 ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" show less	Bad Web Bot Web App Attack
🇬🇧 Steve	2025-04-15 05:23:24 (1 year ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
Anonymous	2024-09-30 03:03:44 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-26 11:41:49 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-28 21:57:12 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 SI META	2024-05-15 14:14:00 (2 years ago)	Brute force On Microsoft 365	Brute-Force
🇺🇸 VSM Networks	2024-02-22 21:39:34 (2 years ago)	Credential Stuffing	Brute-Force
🇫🇷 www.unitiz.com	2023-11-29 02:41:16 (2 years ago)	Spam contact form	Phishing Web Spam
🇫🇷 www.unitiz.com	2023-03-16 16:55:44 (3 years ago)	Spam contact form	Phishing Web Spam
🇺🇸 VSM Networks	2022-09-30 23:38:25 (3 years ago)	Credential Stuffing	Brute-Force
🇬🇧 Al_K	2022-09-30 19:16:10 (3 years ago)	Brute force attack using Azure Portal	Brute-Force
🇺🇸 tradenet	2022-02-02 07:23:51 (4 years ago)	45.15.72.238 - - [02/Feb/2022:06:18:54 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [02/Feb/2022:06:18:54 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:04 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:06 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:08 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 45.15.72.238 - - [02/Feb/2022:06:19:10 -0600] "POST /wp-login.php?action=register HTTP/ ... show less	Bad Web Bot Web App Attack
🇺🇸 tradenet	2022-02-01 07:17:29 (4 years ago)	45.15.72.238 - - [01/Feb/2022:06:07:37 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [01/Feb/2022:06:07:37 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:47 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:49 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:51 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4981 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:06:07:53 -0600] "POST ... show less	Bad Web Bot Web App Attack
🇺🇸 tradenet	2022-02-01 03:33:04 (4 years ago)	45.15.72.238 - - [01/Feb/2022:02:28:12 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.c ... show more 45.15.72.238 - - [01/Feb/2022:02:28:12 -0600] "POST /wp-login.php HTTP/1.0" 302 0 "https://prepuce.com/login/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:25 -0600] "POST /wp-login.php?action=register&type=internal HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:27 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:29 -0600] "POST /wp-login.php?action=register HTTP/1.0" 200 4983 "https://prepuce.com/groups.min.css?ver=9.2.0/create/" "Opera/9.80 (Windows NT 6.1; WOW64; MRA 8.2 (build 7100)) Presto/2.12.388 Version/12.17" 45.15.72.238 - - [01/Feb/2022:02:28:31 -0600] "POST ... show less	Bad Web Bot Web App Attack
🇩🇪 emha.koeln	2022-01-16 13:48:32 (4 years ago)	v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:47:47 +0100] "POST /wp-login.php HTTP/1.0" 200 ... show more v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:47:47 +0100] "POST /wp-login.php HTTP/1.0" 200 2655 "https://www.rv-horrem.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 1263 8255 v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:48:05 +0100] "POST /xmlrpc.php HTTP/1.1" 200 210 "https://www.rv-horrem.de/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 2006 5575 v2202006123119120432 45.15.72.238 - - [16/Jan/2022:19:48:13 +0100] "POST /xmlrpc.php HTTP/1.1" 200 210 "https://www.rv-horrem.de/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3400.0 Iron Safari/537.36" 11043 5575 show less	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.223

🇧🇷 205.210.31.184

🇳🇱 45.142.193.35

🇸🇬 43.163.67.155

🇦🇺 34.40.145.110

🇨🇱 186.10.86.130

🇺🇸 185.223.152.109

🇺🇸 185.223.152.103

🇬🇧 185.216.145.168

🇮🇳 143.110.247.221

🇨🇳 115.190.230.82

🇮🇩 103.98.176.164

🇷🇴 80.94.92.234

🇺🇸 38.181.57.203

🇨🇳 203.189.221.17

🇺🇸 195.184.76.111

🇹🇼 128.14.236.41

🇨🇳 36.33.167.165

🇳🇱 213.233.246.169

🇨🇴 209.14.113.84