JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.159.81.14

203.159.81.14 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 42%: ?

42%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.159.81.14

Whois 203.159.81.14

IP Abuse Reports for 203.159.81.14:

This IP address has been reported a total of 99 times from 54 distinct sources. 203.159.81.14 was first reported on September 22nd 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-24 07:40:09 (23 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-22 02:07:58 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇿 Antinson	2026-06-21 17:35:10 (3 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇬🇧 consul.to	2026-06-20 21:16:48 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-19 19:40:40 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 nodepile	2026-06-11 07:39:00 (1 week ago)	Repeatedly blocked bad web bot (tenant=82 method=GET path=/wp-content/uploads/wp-file-manager-pro/ad ... show more Repeatedly blocked bad web bot (tenant=82 method=GET path=/wp-content/uploads/wp-file-manager-pro/admin.php ua='python-requests/2.34.2') show less	Bad Web Bot
🇬🇧 Oakley	2026-06-09 05:40:34 (2 weeks ago)	(mod_security) mod_security (id:900191) triggered by 203.159.81.14 (IL/Israel/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900191) triggered by 203.159.81.14 (IL/Israel/-): 5 in the last 900 secs show less	Web App Attack Hacking
Anonymous	2026-06-08 08:44:01 (2 weeks ago)	203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 4 ... show more 203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 404 476 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-includes/bk/ HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.159.81.14 - - [08/Jun/2026:10:43:44 +0200] "GET /wp-content/themes/hello-element/ HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ... show less	DDoS Attack
🇫🇷 dynamix	2026-06-08 00:50:59 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-07 16:39:49 (2 weeks ago)	Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.p ... show more Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso. ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-07 13:44:07 (2 weeks ago)	203.159.81.14 - - [07/Jun/2026:16:44:06 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 4 ... show more 203.159.81.14 - - [07/Jun/2026:16:44:06 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.159.81.14 - - [07/Jun/2026:16:44:07 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" ... show less	Web App Attack
🇩🇪 ValtonTahiri	2026-02-24 22:30:39 (4 months ago)	Honeypot hit: HTTP GET http://[SOME-IP]/env.production.js URL: http://[SOME-IP]/env.production.js Me ... show more Honeypot hit: HTTP GET http://[SOME-IP]/env.production.js URL: http://[SOME-IP]/env.production.js Method: GET Status: 200 User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Host: [SOME-IP] Accept: / Other Headers: accept-encoding: *, connection: keep-alive show less	Hacking Bad Web Bot
🇫🇷 dynamix	2026-02-11 00:37:13 (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Vegascosmetics	2026-01-15 22:51:37 (5 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-01-06 22:59:15 (5 months ago)	Auto-ban: >3000 req/min op 2026-01-06	Hacking Web App Attack SSH

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 147.50.231.135

🇺🇸 107.174.193.207

🇨🇳 42.194.181.182

🇦🇺 1.146.117.67

🇨🇳 148.70.47.10

🇺🇸 100.27.153.9

🇳🇱 77.251.239.189

🇲🇽 74.244.5.86

🇮🇳 65.1.145.117

🇫🇷 62.171.169.75

🇳🇱 45.142.193.121

🇰🇷 1.214.197.163

🇧🇷 205.210.31.241

🇵🇱 194.180.48.148

🇳🇱 45.148.10.240

🇻🇳 14.191.196.186

🇮🇪 4.210.91.174

🇮🇳 210.79.132.152

🇲🇽 200.92.184.149

🇮🇳 175.101.22.17