JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.56.94.159

45.56.94.159 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 30%: ?

30%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	45-56-94-159.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Fremont, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.56.94.159

Whois 45.56.94.159

IP Abuse Reports for 45.56.94.159:

This IP address has been reported a total of 48 times from 7 distinct sources. 45.56.94.159 was first reported on February 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-12 12:36:59 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-10 09:09:52 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-09 08:40:42 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 18:53:57 (1 week ago)	(mod_security) mod_security (id:217210) triggered by 45.56.94.159 (45-56-94-159.ip.linodeusercontent ... show more (mod_security) mod_security (id:217210) triggered by 45.56.94.159 (45-56-94-159.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:53:52.388387 2026] [security2:error] [pid 965:tid 1123] [client 45.56.94.159:5872] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|geekshop.com\|F\|4"] [data "deyposionGET / HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "geekshop.com"] [uri "/"] [unique_id "aiW-QMsSqwNjsbofQU94xQAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 11:01:09 (1 week ago)	Web Scanning Attack to Multiple Domain	DDoS Attack Ping of Death Web Spam Hacking
🇬🇧 consul.to	2026-06-07 03:38:15 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 updown.io	2026-06-06 15:20:24 (1 week ago)	{"level":"info","ts":1780759223.0472887,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780759223.0472887,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"45.56.94.159","remote_port":"29902","client_ip":"45.56.94.159","proto":"HTTP/1.1","method":"HEAD","host":"status.hiltonblows.com","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6723.70 Safari/537.36"],"Content-Length":["20"],"Accept-Language":["en-US;q=0.9,en;q=0.8"],"Cache-Control":["max-age=0"],"Cookie":["REDACTED"],"Connection":["close"],"Accept":["/"],"Accept-Encoding":["gzip, deflate, br"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.hiltonblows.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.001025431,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1780759223.0534072,"logger":"http.log.access.log1","msg":"handled request","request":{ ... show less	DDoS Attack Web App Attack
🇬🇧 consul.to	2026-06-05 16:30:41 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-03 19:33:04 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-02 13:14:43 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-01 05:19:18 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-29 11:31:03 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-26 09:47:04 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-23 06:21:08 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-21 00:20:28 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.158

🇺🇸 195.184.76.222

🇺🇸 193.203.8.83

🇧🇷 186.248.218.137

🇨🇳 180.184.141.117

🇫🇷 146.70.194.238

🇭🇰 118.26.36.195

🇵🇭 103.149.37.3

🇳🇱 77.83.39.14

🇹🇭 49.228.242.242

🇺🇸 2001:470:1:332::36

🇺🇸 146.148.32.145

🇳🇱 51.158.254.160

🇺🇸 45.79.207.111

🇩🇪 43.228.157.82

🇹🇼 36.235.237.106

🇸🇬 129.226.221.96

🇷🇺 95.104.250.194

🇭🇰 47.76.197.46

🇳🇱 45.148.10.157