JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.61.248.16

72.61.248.16 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 50%: ?

50%

ISP	Hostinger Operations UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Hostname(s)	srv1240685.hstgr.cloud
Domain Name	hostinger.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.61.248.16

Whois 72.61.248.16

IP Abuse Reports for 72.61.248.16:

This IP address has been reported a total of 12 times from 7 distinct sources. 72.61.248.16 was first reported on August 30th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TAY	2026-09-01 08:29:29 (13 hours ago)	72.61.248.16 - - [01/Sep/2026:16:29:20 +0800] "GET /wp-config.php~ HTTP/1.1" 301 480 "-" "Mozilla/5. ... show more 72.61.248.16 - - [01/Sep/2026:16:29:20 +0800] "GET /wp-config.php~ HTTP/1.1" 301 480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.61.248.16 - - [01/Sep/2026:16:29:20 +0800] "GET /wp-config.php~ HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.61.248.16 - - [01/Sep/2026:16:29:23 +0800] "GET /wp-config.php.save HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.61.248.16 - - [01/Sep/2026:16:29:24 +0800] "GET /wp-config.php.save HTTP/1.1" 404 48441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 72.61.248.16 - - [01/Sep/2026:16:29:26 +0800] "GET /wp-config.php.old HTTP/1.1" 301 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Brute-Force
🇳🇱 homeshowdomain.nl	2026-08-31 22:02:58 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30. show less	Web App Attack SSH Hacking
Anonymous	2026-08-31 20:20:02 (1 day ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 18:39:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:39:16.185099 2026] [security2:error] [pid 9296:tid 9370] [client 72.61.248.16:42992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wallstreetglobe.com"] [uri "/.git/config"] [unique_id "apXKVCq5XkWxfEKKsYbqfAAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 etu brutus	2026-08-31 17:54:07 (1 day ago)	72.61.248.16 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 14:51:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:51:43.182419 2026] [security2:error] [pid 12401:tid 12401] [client 72.61.248.16:45672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theantidote.gregorii.com"] [uri "/.git/config"] [unique_id "apWU_5JUdY3KhkP28pwuzgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-31 14:49:13 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 12:05:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:05:15.770801 2026] [security2:error] [pid 3720718:tid 3720743] [client 72.61.248.16:52418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reghay.com"] [uri "/.git/config"] [unique_id "apVt-8wcvWxEfdoqgMHEMwAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-08-31 11:54:03 (1 day ago)	tcp/443	Port Scan
🇺🇸 MPL	2026-08-31 11:54:03 (1 day ago)	tcp ports: 80,443 (3 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-08-31 10:51:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 72.61.248.16 (srv1240685.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:51:15.580325 2026] [security2:error] [pid 17856:tid 17856] [client 72.61.248.16:48516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ibermar.info"] [uri "/.git/config"] [unique_id "apVcoxVb2pJ3WvUq6iOMkgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-30 22:00:17 (2 days ago)	Auto-ban: >3000 req/min op 2026-08-30	Web App Attack SSH Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.160.171.212

🇵🇰 205.164.158.104

🇺🇸 174.140.218.3

🇷🇺 89.223.125.204

🇰🇷 222.239.251.12

🇨🇳 220.202.112.121

🇳🇱 213.177.179.166

🇳🇱 172.94.9.64

🇮🇳 115.246.242.2

🇨🇳 112.102.221.210

🇨🇳 106.53.194.58

🇺🇸 68.51.53.90

🇩🇪 167.94.146.54

🇺🇸 162.216.150.238

🇵🇭 119.93.40.244

🇵🇱 109.205.211.110

🇫🇷 62.210.198.211

🇺🇸 52.179.93.129

🇸🇬 47.236.119.62

🇵🇰 103.172.167.65