JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.159.148.45

43.159.148.45 was found in our database!

This IP was reported 348 times. Confidence of Abuse is 40%: ?

40%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.159.148.45

Whois 43.159.148.45

IP Abuse Reports for 43.159.148.45:

This IP address has been reported a total of 348 times from 106 distinct sources. 43.159.148.45 was first reported on February 9th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 SoteriaCovenant	2026-07-25 06:45:29 (6 hours ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-07-24 06:38:25 (1 day ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-07-23 06:25:03 (2 days ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-07-21 06:59:24 (4 days ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-07-20 06:53:59 (5 days ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-07-19 06:08:25 (6 days ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇭🇳 unph	2026-07-18 01:02:45 (1 week ago)	Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin	Brute-Force
🇨🇦 SoteriaCovenant	2026-07-17 06:57:06 (1 week ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇩🇪 london2038.com	2026-07-16 08:40:20 (1 week ago)	Attacking WordPress 43.159.148.45 - - [16/Jul/2026:10:40:16 +0200] "POST /wp-json/gutenkit/v1/instal ... show more Attacking WordPress 43.159.148.45 - - [16/Jul/2026:10:40:16 +0200] "POST /wp-json/gutenkit/v1/install-active-plugin HTTP/1.1" 403 17026 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" show less	Brute-Force Web App Attack
Anonymous	2026-07-16 07:11:00 (1 week ago)	Blocked by firewall for GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload at **/wp-json/gu ... show more Blocked by firewall for GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload at **/wp-json/gutenkit/v1/install-active-plugin Jul 15, 2026 2:40:24 PM (17 hours 30 minutes ago) IP: 43.159.148.45 Hostname: 43.159.148.45 Human/Bot: Human Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1 show less	Web App Attack Hacking
🇨🇦 SoteriaCovenant	2026-07-16 05:50:46 (1 week ago)	Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vul ... show more Automated probe: /wp-json/gutenkit/v1/install-active-plugin on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇫🇮 6kilowatti	2026-07-13 12:25:06 (1 week ago)	43.159.148.45 - - [13/Jul/2026:15:25:06 +0300] "POST /wp-json/gutenkit/v1/install-active-plugin HTTP ... show more 43.159.148.45 - - [13/Jul/2026:15:25:06 +0300] "POST /wp-json/gutenkit/v1/install-active-plugin HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 19:49:21 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 15:49:13.099504 2026] [security2:error] [pid 12546:tid 12546] [client 43.159.148.45:64131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|oshadega.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oshadega.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj2GOWB7YlztmVsSVbmAigAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 14:20:24 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 10:20:17.950265 2026] [security2:error] [pid 14454:tid 14454] [client 43.159.148.45:63662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artevoix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artevoix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj05IdeydpXVatmDUxJYRAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 21:02:52 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 43.159.148.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 17:02:46.273851 2026] [security2:error] [pid 17021:tid 17021] [client 43.159.148.45:58640] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pharmaceuticalsalescareerhub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pharmaceuticalsalescareerhub.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajxF9q_elpEM8DRbrcepBAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 348 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇺🇸 167.71.175.236

🇨🇳 119.53.253.2

🇳🇱 45.148.10.239

🇫🇮 35.228.6.219

🇧🇪 35.205.92.76

🇫🇮 209.85.208.182

🇮🇶 185.147.101.196

🇲🇾 165.154.147.69

🇺🇸 157.245.246.139

🇯🇴 86.108.68.40

🇺🇸 66.132.195.33

🇰🇷 34.47.64.105

🇺🇸 142.171.227.7

🇧🇷 131.100.242.102

🇨🇳 113.0.152.164

🇻🇳 103.57.220.144

🇳🇱 91.92.42.147

🇪🇬 82.201.143.184

🇬🇧 51.38.71.55