JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.159.81.45

203.159.81.45 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 26%: ?

26%

ISP	VPN Consumer Network Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.159.81.45

Whois 203.159.81.45

IP Abuse Reports for 203.159.81.45:

This IP address has been reported a total of 83 times from 50 distinct sources. 203.159.81.45 was first reported on June 22nd 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-20 17:25:25 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 nodepile	2026-06-11 07:36:13 (1 week ago)	Repeatedly blocked bad web bot (tenant=82 method=GET path=/afxii.php ua='python-requests/2.34.2')	Bad Web Bot
🇫🇷 Octopuce	2026-06-07 22:02:36 (1 week ago)	Aggressive web search of vulnerable pages: /filemanager.php /cgi-bin/bypass.php /.well-known/pki-val ... show more Aggressive web search of vulnerable pages: /filemanager.php /cgi-bin/bypass.php /.well-known/pki-validation/admin.php /wp-includes/IXR/admin.ph ... show less	Web App Attack
🇬🇧 consul.to	2026-06-07 16:25:58 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-07 13:43:14 (1 week ago)	203.159.81.45 - - [07/Jun/2026:16:43:12 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 404 ... show more 203.159.81.45 - - [07/Jun/2026:16:43:12 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.159.81.45 - - [07/Jun/2026:16:43:13 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" ... show less	Web App Attack
🇩🇪 ValtonTahiri	2026-02-24 22:31:48 (3 months ago)	Honeypot hit: HTTP GET http://[SOME-IP]/app_dev.php/_profiler/phpinfo URL: http://[SOME-IP]/app_dev. ... show more Honeypot hit: HTTP GET http://[SOME-IP]/app_dev.php/_profiler/phpinfo URL: http://[SOME-IP]/app_dev.php/_profiler/phpinfo Method: GET Status: 200 User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Host: [SOME-IP] Accept: / Other Headers: accept-encoding: *, connection: keep-alive show less	Hacking Bad Web Bot
Anonymous	2026-02-24 09:40:40 (3 months ago)	[redacted] 203.159.81.45 - - [24/Feb/2026:10:40:32 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 ... show more [redacted] 203.159.81.45 - - [24/Feb/2026:10:40:32 +0100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" [redacted] 203.159.81.45 - - [24/Feb/2026:10:40:32 +0100] "GET /wp-admin/includes/about.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" [redacted] 203.159.81.45 - - [24/Feb/2026:10:40:32 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 203.159.81.45 - - [24/Feb/2026:10:40:33 +0100] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" [redacted] 203.159.81.45 - - [24/Feb/2026:10:40:34 +0100 ... show less	Hacking Web App Attack
Anonymous	2026-01-20 01:19:43 (5 months ago)	Fail2ban: all-services - 203.159.81.45 - - [27/Dec/2025:10:43:43 -0500] "GET /wp-admin/css/colors/bl ... show more Fail2ban: all-services - 203.159.81.45 - - [27/Dec/2025:10:43:43 -0500] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "203.159.81.45" attempts show less	Hacking Web App Attack
🇷🇺 sms.ru	2026-01-05 09:42:45 (5 months ago)	/wp-admin/	Web App Attack
🇳🇱 Site.eu	2026-01-05 02:27:30 (5 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-01-04 14:12:54 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 203.159.81.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 203.159.81.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 09:12:46.193118 2026] [security2:error] [pid 13343:tid 13343] [client 203.159.81.45:57465] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|eydebrothers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "eydebrothers.com"] [uri "/images/stories/themes.php"] [unique_id "aVp1XnmZVgiyNwORc68dkgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-01-04 13:04:09 (5 months ago)	Try to access /admin.php	Web App Attack
🇷🇺 sms.ru	2026-01-04 11:21:01 (5 months ago)	/wp-admin/css/colors/blue/file.php	Web App Attack
🇳🇱 Site.eu	2026-01-04 09:43:14 (5 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 dynamix	2026-01-04 09:42:49 (5 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.227

🇧🇷 201.26.193.113

🇷🇴 193.46.255.86

🇹🇷 31.210.152.179

🇻🇳 14.225.217.138

🇳🇱 5.187.35.26

🇺🇸 205.210.31.110

🇩🇪 138.68.110.246

🇧🇩 103.124.225.89

🇵🇰 103.19.252.30

🇺🇸 96.126.117.80

🇷🇴 92.118.39.210

🇸🇬 85.203.21.109

🇳🇱 81.19.216.99

🇷🇴 80.94.95.202

🇷🇴 80.94.92.187

🇲🇾 47.254.198.155

🇳🇱 45.148.10.141

🇺🇸 20.66.60.181

🇨🇳 221.2.109.10