JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.172.72.23

45.172.72.23 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	LIVENET SERVICOS DE COMUNICACAO MULTMIDIA LTDA ME
Usage Type	Fixed Line ISP
ASN	AS268760
Hostname(s)	45-172-72-23.grupolivenet.com.br
Domain Name	grupolivenet.com.br
Country	🇧🇷 Brazil
City	Brasilia, Federal District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.172.72.23

Whois 45.172.72.23

IP Abuse Reports for 45.172.72.23:

This IP address has been reported a total of 11 times from 8 distinct sources. 45.172.72.23 was first reported on January 30th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-07 18:37:14 (1 month ago)	[Mon Jun 08 01:37:14.007043 2026] [security2:error] [pid 261236:tid 140409937249984] [client 45.172. ... show more [Mon Jun 08 01:37:14.007043 2026] [security2:error] [pid 261236:tid 140409937249984] [client 45.172.72.23:23856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "aiW6WnYJVO5AP9F4NafJMgABwhI"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[261255] [C+mdLm6GmuE] [aiW6WnYJVO5AP9F4NafJMgABwhI] keep_alive=[1] [2026-06-08 01:37:14.007048] [R:aiW6WnYJVO5AP9F4NafJMgABwhI] U ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-01-02 00:41:34 (6 months ago)	[Fri Jan 02 07:41:33.920064 2026] [security2:error] [pid 337594:tid 140303617992384] [client 45.172. ... show more [Fri Jan 02 07:41:33.920064 2026] [security2:error] [pid 337594:tid 140303617992384] [client 45.172.72.23:25367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:Accept. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "425"] [id "440009"] [msg " Image Heif"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: text/html found within REQUEST_HEADERS:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-all-categories Request Basename = list-all-categories"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "aVcUPan9hRfsTI6KP8v38wAADwU"] [staklim-jat ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2025-10-24 06:24:06 (8 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇫🇷 bigorre.org	2025-10-23 16:22:23 (8 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2025-10-17 08:04:32 (9 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to by ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to bypass robots.txt in thread-skip.asp show less	Bad Web Bot Exploited Host
Anonymous	2025-10-17 08:04:32 (9 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to by ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to bypass robots.txt in thread-skip.asp show less	Bad Web Bot Exploited Host
Anonymous	2025-10-10 13:19:10 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.10 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 exxos	2025-08-31 08:05:08 (10 months ago)	Attacks with Bad user agents	Hacking
🇫🇷 bigorre.org	2025-08-22 08:51:59 (10 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇫🇷 Sklurk	2025-08-12 02:12:18 (11 months ago)	Web App Attack	Web App Attack
Anonymous	2025-01-30 11:35:32 (1 year ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.111.80.49

🇺🇸 162.217.100.201

🇮🇳 152.32.156.138

🇸🇬 119.13.106.88

🇨🇦 85.217.149.66

🇸🇬 68.183.236.1

🇺🇸 47.251.82.1

🇺🇸 172.67.189.3

🇩🇪 140.248.227.49

🇻🇳 113.166.56.115

🇮🇩 110.137.81.119

🇺🇸 71.6.135.131

🇺🇸 68.7.114.69

🇺🇸 45.41.160.69

🇧🇷 185.100.215.213

🇺🇸 173.239.224.24

🇮🇩 165.154.151.176

🇸🇬 159.65.128.12

🇯🇵 107.155.15.8

🇷🇺 77.83.72.79