JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.60.221.245

72.60.221.245 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 64%: ?

64%

ISP	Hostinger Operations UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Hostname(s)	srv1092600.hstgr.cloud
Domain Name	hostinger.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.60.221.245

Whois 72.60.221.245

IP Abuse Reports for 72.60.221.245:

This IP address has been reported a total of 13 times from 10 distinct sources. 72.60.221.245 was first reported on August 28th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-02 11:51:49 (11 hours ago)	[server.tmg.gr] httpd-config-scan: sites=www.add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log; ... show more [server.tmg.gr] httpd-config-scan: sites=www.add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log; samples=/wp-config.php.bak \| /wp-config.php~ \| /wp-config.php.swp show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 06:48:00 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:47:56.615404 2026] [security2:error] [pid 2908:tid 2908] [client 72.60.221.245:39694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/wp-config.php.bak"] [unique_id "apfGnDDEmIXtiQcRqSVuqwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-09-02 06:42:44 (16 hours ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇩🇪 4server	2026-09-02 06:32:14 (16 hours ago)	[WedSep0208:32:10.2659092026][security2:error][pid1058429:tid1058461][client72.60.221.245:0]ModSecur ... show more [WedSep0208:32:10.2659092026][security2:error][pid1058429:tid1058461][client72.60.221.245:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(/wp-content/backup-\\|/wp-content/backups/\\|/wp-content/uploads/backups/\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"22\"][id\"200110\"][msg\"WordPressbackupdownloadattempt\"][hostname\"risparmiocasasuisse.ch\"][uri\"/wp-content/backup-db/\"][unique_id\"apfC6rRSW9t5A-hCu2lCPQAAABU\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Holger	2026-09-01 20:25:58 (1 day ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 18:10:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:10:30.325796 2026] [security2:error] [pid 4944:tid 4950] [client 72.60.221.245:56372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worldecom.org"] [uri "/wp-config.php.swp"] [unique_id "apcVFp9eFmZnnxHsI4ZT0AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 SchorelWeb	2026-09-01 07:31:49 (1 day ago)	Cluster member (Omitted) (US/United States/-) said, TEMPDENY 72.60.221.245, Reason:[(Suspicious02) S ... show more Cluster member (Omitted) (US/United States/-) said, TEMPDENY 72.60.221.245, Reason:[(Suspicious02) Suspicious activity detected 72.60.221.245 (IN/India/-): 10 in the last 3600 secs] show less	Brute-Force SSH
🇺🇸 TAY	2026-09-01 00:23:26 (1 day ago)	72.60.221.245 - - [01/Sep/2026:08:18:58 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Moz ... show more 72.60.221.245 - - [01/Sep/2026:08:18:58 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.60.221.245 - - [01/Sep/2026:08:19:12 +0800] "GET /wp-config.php.txt HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.60.221.245 - - [01/Sep/2026:08:23:20 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.60.221.245 - - [01/Sep/2026:08:23:21 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.60.221.245 - - [01/Sep/2026:08:23:24 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force
Anonymous	2026-08-31 21:05:34 (2 days ago)	SPARSDE WEBEXPLOIT 72.60.221.245 (srv1092600.hstgr.cloud)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 20:19:47 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 72.60.221.245 (srv1092600.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 16:19:44.021181 2026] [security2:error] [pid 4219:tid 4219] [client 72.60.221.245:58852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mytapt.com"] [uri "/wp-config.php.swp"] [unique_id "apXh4OM7YS1xbHiF52dgtAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-08-29 21:58:40 (4 days ago)	tcp/443	Port Scan
🇮🇪 Jim Keir	2026-08-29 16:57:39 (4 days ago)	2026-08-29 16:57:38 72.60.221.245 File scanning, blocking 72.60.221.245 for 5 minutes	Web App Attack
🇺🇸 MPL	2026-08-28 12:33:14 (5 days ago)	tcp/443 (3 or more attempts)	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 222.167.119.124

🇺🇸 222.167.126.133

🇺🇸 212.46.128.117

🇺🇸 209.139.126.229

🇺🇸 161.123.106.241

🇺🇸 159.223.133.138

🇮🇩 157.15.67.253

🇺🇸 136.242.99.5

🇧🇩 103.154.192.40

🇺🇸 34.207.109.220

🇹🇷 212.38.88.74

🇺🇸 204.44.118.113

🇮🇩 182.253.153.55

🇳🇱 176.65.149.230

🇺🇸 161.123.177.123

🇨🇳 118.196.118.181

🇺🇸 104.204.202.146

🇺🇸 91.203.131.138

🇫🇷 91.134.142.214

🇺🇸 68.202.38.181