JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.221.172

45.159.221.172 was found in our database!

This IP was reported 419 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2389052.contaboserver.net
Domain Name	contabo.com
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.221.172

Whois 45.159.221.172

IP Abuse Reports for 45.159.221.172:

This IP address has been reported a total of 419 times from 132 distinct sources. 45.159.221.172 was first reported on April 16th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-05 23:46:21 (1 week ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 4server	2026-05-27 01:37:00 (3 weeks ago)	[WedMay2703:36:57.1851162026][security2:error][pid2346315:tid2346434][client45.159.221.172:0]ModSecu ... show more [WedMay2703:36:57.1851162026][security2:error][pid2346315:tid2346434][client45.159.221.172:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mgevents.ch\"][uri\"/wp-login.php\"][unique_id\"ahZKue4J0fSuhjQr3dKzBwAAARU\"]\,referer:https://mgevents.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-27 00:38:35 (3 weeks ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 45.159.221.172 (DE/Germany/vmi2389052.contabo ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 45.159.221.172 (DE/Germany/vmi2389052.contaboserver.net): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 LRob.fr	2026-05-27 00:30:03 (3 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 AdminPL	2026-05-27 00:26:37 (3 weeks ago)	WordPress User Enumeration attempt via REST API. Original URI: /&rest_route=/wp/v2/users&cal ... show more WordPress User Enumeration attempt via REST API. Original URI: /&rest_route=/wp/v2/users&callback=jsonp&per_page=100&_fields=id,slug show less	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-05-26 22:00:35 (3 weeks ago)	wp-login attack [26/May/2026:20:11:36	Brute-Force Web App Attack
🇲🇹 Malta	2026-05-26 13:07:34 (3 weeks ago)	45.159.221.172 - - [26/May/2026:15:07:34 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 45.159.221.172 - - [26/May/2026:15:07:34 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-05-22 22:22:24 (3 weeks ago)	[Fri May 22 23:58:36.244633 2026] [authz_core:error] [pid 45498:tid 45652] [client 45.159.221.172:56 ... show more [Fri May 22 23:58:36.244633 2026] [authz_core:error] [pid 45498:tid 45652] [client 45.159.221.172:56192] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php [Fri May 22 23:58:36.342947 2026] [authz_core:error] [pid 45498:tid 45639] [client 45.159.221.172:56192] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wp-login.php [Sat May 23 00:22:23.309130 2026] [authz_core:error] [pid 45682:tid 45711] [client 45.159.221.172:57676] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php [Sat May 23 00:22:23.487724 2026] [authz_core:error] [pid 45682:tid 45726] [client 45.159.221.172:57676] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wp-login.php ... show less	Brute-Force Web App Attack
🇸🇮 administrator	2026-05-22 22:14:01 (3 weeks ago)	2026-05-22 16:23:35,335 fail2ban.actions [1070]: NOTICE [webadmin-badips] Ban 45.159.221.172 ... show more 2026-05-22 16:23:35,335 fail2ban.actions [1070]: NOTICE [webadmin-badips] Ban 45.159.221.172 2026-05-22 16:23:35,335 fail2ban.actions [1070]: NOTICE [webadmin-badips] Ban 45.159.221.172 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-05-22 22:10:14 (3 weeks ago)	2026-05-22T23:15:44.806810+02:00 milkyway wordpress(learncryptography.pw)[752159]: Authentication at ... show more 2026-05-22T23:15:44.806810+02:00 milkyway wordpress(learncryptography.pw)[752159]: Authentication attempt for unknown user noxxi from 45.159.221.172 2026-05-22T23:37:26.563670+02:00 milkyway wordpress(oldscarborough.com)[745487]: Authentication failure for joshua from 45.159.221.172 2026-05-23T00:10:13.675715+02:00 milkyway wordpress(learncryptography.pw)[766023]: Authentication attempt for unknown user noxxi from 45.159.221.172 ... show less	Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-05-22 22:01:23 (3 weeks ago)	wp-login attack [22/May/2026:09:10:21	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2026-05-22 21:41:03 (3 weeks ago)	(WPLOGIN) WP Login Attack 45.159.221.172 (DE/Germany/vmi2389052.contaboserver.net): 3 in the last 36 ... show more (WPLOGIN) WP Login Attack 45.159.221.172 (DE/Germany/vmi2389052.contaboserver.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.221.172 - - [23/May/2026:04:14:07 +0700] "GET /wp-login.php HTTP/2.0" 200 2454 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [23/May/2026:04:14:09 +0700] "POST /wp-login.php HTTP/2.0" 200 2611 "https://brusselsbarbell.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [23/May/2026:04:40:59 +0700] "GET /wp-login.php HTTP/2.0" 200 1747 "https://www.inthepursuitstudio.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Port Scan
Anonymous	2026-05-22 21:29:19 (3 weeks ago)	45.159.221.172 - - [22/May/2026:23:18:17 +0200] "POST /wp-login.php HTTP/1.0" 200 3385 "https://blue ... show more 45.159.221.172 - - [22/May/2026:23:18:17 +0200] "POST /wp-login.php HTTP/1.0" 200 3385 "https://bluegrassa.site/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [22/May/2026:23:18:18 +0200] "POST /wp-login.php HTTP/1.1" 200 2847 "https://bluegrassa.site/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [22/May/2026:23:28:37 +0200] "POST /wp-login.php HTTP/1.1" 200 2836 "https://natc.gov.zm/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 45.159.221.172 - - [22/May/2026:23:28:37 +0200] "POST /wp-login.php HTTP/1.0" 200 3362 "https://natc.gov.zm/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 45.159.221.1 ... show less	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-05-22 21:20:25 (3 weeks ago)	45.159.221.172 - - [22/May/2026:15:00:11 -0500] "POST /wp-login.php HTTP/1.1" 200 2277 "https://orio ... show more 45.159.221.172 - - [22/May/2026:15:00:11 -0500] "POST /wp-login.php HTTP/1.1" 200 2277 "https://oriontool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [22/May/2026:15:48:58 -0500] "GET /wp-login.php HTTP/1.1" 200 4536 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 45.159.221.172 - - [22/May/2026:15:48:58 -0500] "POST /wp-login.php HTTP/1.1" 200 2282 "https://oriontool.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 45.159.221.172 - - [22/May/2026:16:20:23 -0500] "GET /wp-login.php HTTP/1.1" 200 4536 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [22/May/2026:16:20:24 -0500] "POST /wp-login.php HTTP/1.1" 200 2277 "https://oriontool.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 ... show less	Web App Attack
🇺🇸 mind5t0rm	2026-05-22 20:21:05 (3 weeks ago)	(WPLOGIN) WP Login Attack 45.159.221.172 (DE/Germany/vmi2389052.contaboserver.net): 3 in the last 36 ... show more (WPLOGIN) WP Login Attack 45.159.221.172 (DE/Germany/vmi2389052.contaboserver.net): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.159.221.172 - - [23/May/2026:03:20:00 +0700] "GET /wp-login.php HTTP/2.0" 200 2757 "https://www.greekthai.com/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [23/May/2026:03:20:01 +0700] "GET /wp-login.php HTTP/2.0" 200 2757 "https://www.greekthai.com/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.159.221.172 - - [23/May/2026:03:21:05 +0700] "GET /wp-login.php HTTP/2.0" 200 3129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" show less	Port Scan

Showing 1 to 15 of 419 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.43.109

🇺🇸 172.70.179.207

🇳🇱 160.119.76.30

🇸🇬 101.47.25.139

🇫🇷 45.91.22.86

🇸🇬 43.160.253.60

🇺🇸 18.189.74.1

🇺🇸 16.58.56.214

🇺🇸 2a06:98c0:3600::103

🇩🇪 141.11.250.239

🇦🇺 60.241.26.232

🇨🇦 20.151.116.187

🇭🇰 220.246.42.212

🇧🇪 198.235.24.141

🇮🇩 160.187.174.22

🇵🇰 153.117.9.69

🇮🇩 103.122.34.142

🇷🇺 82.146.16.148

🇩🇪 69.5.169.195

🇺🇸 65.49.1.166