JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.159.220.84

Neutral Activity

Abuse Confidence Score

0% Low Risk

332 reports

114 reporters · latest 9 months ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): cloud.obotechsolutions.africa
Domain Name: contabo.com
Country: 🇩🇪 Germany
City: Karlsruhe, Baden-Wurttemberg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.159.220.84 has been reported 332 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

332 from 114 distinct reporters

First reported

October 6th 2025

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-01-26 18:23:24 UTC · (9 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-01-03 16:30:17 UTC · (10 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2025-12-13 08:00:17 UTC · (11 months ago)	Failed Wordpress Logins	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-02 20:10:14 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-12-02 15:30:15 UTC · (11 months ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 SpaceHost-Server	2025-12-01 23:41:11 UTC · (11 months ago)		Brute-Force Web App Attack
🇧🇾 lns.bz	2025-12-01 21:02:10 UTC · (11 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
Anonymous	2025-12-01 19:55:03 UTC · (11 months ago)	[Mon Dec 01 20:54:27.652527 2025] [authz_core:error] [pid 2165539:tid 132251631216320] [remote 45.159.220.84:49242] AH01630: client denied by server configuration: /var/customers/webs/wivo/prinzenpaar-hannover.de/xmlrpc.php [Mon Dec 01 20:54:42.98020 ... show more [Mon Dec 01 20:54:27.652527 2025] [authz_core:error] [pid 2165539:tid 132251631216320] [remote 45.159.220.84:49242] AH01630: client denied by server configuration: /var/customers/webs/wivo/prinzenpaar-hannover.de/xmlrpc.php [Mon Dec 01 20:54:42.980208 2025] [authz_core:error] [pid 2165539:tid 132251731863232] [remote 45.159.220.84:55142] AH01630: client denied by server configuration: /var/customers/webs/wivo/prinzenpaar-hannover.de/xmlrpc.php [Mon Dec 01 20:55:01.594205 2025] [authz_core:error] [pid 2165538:tid 132252191299264] [remote 45.159.220.84:37642] AH01630: client denied by server configuration: /var/customers/webs/wivo/prinzenpaar-hannover.de/xmlrpc.php show less	Web Spam Blog Spam Brute-Force Web App Attack
🇩🇪 stinpriza	2025-12-01 18:40:40 UTC · (11 months ago)	Web App Attack	Web App Attack
Anonymous	2025-12-01 17:15:44 UTC · (11 months ago)	[Mon Dec 01 18:15:05.257364 2025] [authz_core:error] [pid 2165538:tid 132252317435584] [remote 45.159.220.84:36432] AH01630: client denied by server configuration: /var/customers/webs/kinderspass/der-kinderspass.de/wp-login.php [Mon Dec 01 18:15:23.5 ... show more [Mon Dec 01 18:15:05.257364 2025] [authz_core:error] [pid 2165538:tid 132252317435584] [remote 45.159.220.84:36432] AH01630: client denied by server configuration: /var/customers/webs/kinderspass/der-kinderspass.de/wp-login.php [Mon Dec 01 18:15:23.543367 2025] [authz_core:error] [pid 2165662:tid 132252216526528] [remote 45.159.220.84:39014] AH01630: client denied by server configuration: /var/customers/webs/kinderspass/der-kinderspass.de/wp-login.php [Mon Dec 01 18:15:43.462889 2025] [authz_core:error] [pid 2165539:tid 132252325844672] [remote 45.159.220.84:32952] AH01630: client denied by server configuration: /var/customers/webs/kinderspass/der-kinderspass.de/wp-login.php, referer: https://www.der-kinderspass.de/wp-login.php show less	Web Spam Blog Spam Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2025-12-01 17:05:49 UTC · (11 months ago)	45.159.220.84 - - [01/Dec/2025:17:05:02 +0000] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; BOIE9;ENUS; rv:11.0) like Gecko" 45.159.220.84 - - [01/Dec/2025:17:05:18 +0000] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" ... show more 45.159.220.84 - - [01/Dec/2025:17:05:02 +0000] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; BOIE9;ENUS; rv:11.0) like Gecko" 45.159.220.84 - - [01/Dec/2025:17:05:18 +0000] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; BOIE9;ENUS; rv:11.0) like Gecko" 45.159.220.84 - - [01/Dec/2025:17:05:38 +0000] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; BOIE9;ENUS; rv:11.0) like Gecko" ... show less	Hacking Web App Attack
🇺🇸 mind5t0rm	2025-12-01 16:55:31 UTC · (11 months ago)	(PERMBLOCK) 45.159.220.84 (DE/Germany/cloud.obotechsolutions.africa) has had more than 10 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	Port Scan
🇺🇸 Rip	2025-12-01 15:06:53 UTC · (11 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2025-12-01 15:04:45 UTC · (11 months ago)	(XMLRPC,WPLOGIN) Login failure/trigger from 45.159.220.84 (DE/Germany/cloud.obotechsolutions.africa): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.220.84 - - [01/Dec/2025:21:52:49 +0700] "POST /xmlrpc.php HTT ... show more (XMLRPC,WPLOGIN) Login failure/trigger from 45.159.220.84 (DE/Germany/cloud.obotechsolutions.africa): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.220.84 - - [01/Dec/2025:21:52:49 +0700] "POST /xmlrpc.php HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" 45.159.220.84 - - [01/Dec/2025:22:04:12 +0700] "GET /wp-login.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; LCJB; rv:11.0) like Gecko" 45.159.220.84 - - [01/Dec/2025:22:04:41 +0700] "POST /xmlrpc.php HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" show less	Port Scan
🇺🇸 mind5t0rm	2025-12-01 14:03:42 UTC · (11 months ago)	(XMLRPC,WPLOGIN) Login failure/trigger from 45.159.220.84 (DE/Germany/cloud.obotechsolutions.africa): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.220.84 - - [01/Dec/2025:20:54:19 +0700] "POST /xmlrpc.php HTT ... show more (XMLRPC,WPLOGIN) Login failure/trigger from 45.159.220.84 (DE/Germany/cloud.obotechsolutions.africa): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.220.84 - - [01/Dec/2025:20:54:19 +0700] "POST /xmlrpc.php HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 45.159.220.84 - - [01/Dec/2025:20:54:34 +0700] "POST /xmlrpc.php HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 45.159.220.84 - - [01/Dec/2025:21:03:37 +0700] "GET /wp-login.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Port Scan

Showing 1 to 15 of 332 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.207.248.141

🇨🇳 222.210.35.197

🇨🇴 181.62.56.67

🇨🇴 181.58.70.249

🇺🇸 104.198.140.88

🇪🇸 95.63.238.138

🇷🇺 81.30.52.102

🇺🇸 64.58.205.188

🇺🇸 63.135.161.56

🇳🇱 45.156.87.78

🇺🇸 12.236.137.172

🇸🇪 217.208.90.253

🇩🇿 197.113.220.155

🇳🇱 193.47.62.69

🇰🇷 183.109.153.176

🇺🇸 65.49.1.185

🇺🇸 63.135.161.72

🇳🇱 45.148.10.141

🇸🇬 43.245.98.60

🇵🇪 38.253.147.164