JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.223.132.86

Recent Activity

Abuse Confidence Score

100% Critical

7,059 reports

1,045 reporters · latest 1 hour ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): f090494790.scan.leakix.org
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

7,059 from 1,045 distinct reporters

First reported

April 24th 2022

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 216 🇩🇪 Germany 201 🇵🇱 Poland 153

Most common categories Web App Attack 737 Bad Web Bot 395 Brute-Force 280 Port Scan 209 Hacking 196

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-10-30 01:37:14 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇦 jacqueskruger	2026-10-29 23:56:52 (2 hours ago)	Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-10-29T23:51:41Z. Evidence: repeated distinct requests matchin ... show more Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-10-29T23:51:41Z. Evidence: repeated distinct requests matching our high-confidence scanner rules. show less	Bad Web Bot
🇩🇪 Optimatiq (ThreatBite)	2026-10-29 22:42:42 (4 hours ago)	Probe for secrets or exploit paths (fail2ban)	Hacking Web App Attack
🇩🇪 altenglaner	2026-10-29 22:05:08 (4 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
Anonymous	2026-10-29 16:25:36 (10 hours ago)	2026-10-29T18:25:31.710890+02:00 mail sshd[3284652]: refused connect from 159.223.132.86 (159.223.132.86) 2026-10-29T18:25:34.786857+02:00 mail sshd[3284654]: refused connect from 159.223.132.86 (159.223.132.86) 2026-10-29T18:25:35.866048+02:00 mail ... show more 2026-10-29T18:25:31.710890+02:00 mail sshd[3284652]: refused connect from 159.223.132.86 (159.223.132.86) 2026-10-29T18:25:34.786857+02:00 mail sshd[3284654]: refused connect from 159.223.132.86 (159.223.132.86) 2026-10-29T18:25:35.866048+02:00 mail sshd[3284655]: refused connect from 159.223.132.86 (159.223.132.86) ... show less	SSH
🇸🇬 itachi1706	2026-10-29 16:06:56 (10 hours ago)	2026-10-30T00:06:53.690948+08:00 vmi996132.contaboserver.net sshd[894463]: banner exchange: Connection from 159.223.132.86 port 48452: invalid format 2026-10-30T00:06:54.120495+08:00 vmi996132.contaboserver.net sshd[894464]: banner exchange: Connecti ... show more 2026-10-30T00:06:53.690948+08:00 vmi996132.contaboserver.net sshd[894463]: banner exchange: Connection from 159.223.132.86 port 48452: invalid format 2026-10-30T00:06:54.120495+08:00 vmi996132.contaboserver.net sshd[894464]: banner exchange: Connection from 159.223.132.86 port 48462: invalid format 2026-10-30T00:06:55.318911+08:00 vmi996132.contaboserver.net sshd[894465]: Connection reset by 159.223.132.86 port 48466 [preauth] ... show less	Brute-Force SSH
🇸🇪 vaia.cloud	2026-10-29 15:55:02 (10 hours ago)	crowdsecurity/jira_cve-2021-26086	Brute-Force Web App Attack
🇦🇺 specializedtom	2026-10-29 14:55:02 (11 hours ago)	Fail2Ban triggered a ban on 159.223.132.86 for postfix-sasl	Phishing Email Spam Spoofing
🇫🇷 masterguru	2026-10-29 14:41:54 (12 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "l9scan" at REQUEST_HEADERS:User-Agent. (1100000-193)	Bad Web Bot
🇫🇷 PhiJai	2026-10-29 13:43:57 (13 hours ago)	Signalement automatique (DEUS NemesisBanisher). fouille : a récupéré un fichier de secrets (/.env).	Web App Attack
🇺🇸 TPI-Abuse	2026-10-29 09:31:55 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 159.223.132.86 (f090494790.scan.leakix.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 05:31:48.984765 2026] [security2:error] [pid 925:tid 925] [client ... show more (mod_security) mod_security (id:210492) triggered by 159.223.132.86 (f090494790.scan.leakix.org): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 05:31:48.984765 2026] [security2:error] [pid 925:tid 925] [client 159.223.132.86:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/.env"] [unique_id "auMShGQnZT7ML88OY8w7IAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-29 09:21:50 (17 hours ago)	FortiWeb WAF: 56 attacks detected. Threat Score: 12500. Types: Client Management(28), Block IP List(28). Origin: United States.	Web App Attack
🇩🇪 ghostwarriors	2026-10-29 07:50:17 (19 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-29 07:48:14 (19 hours ago)	Web application attack: jira cve 2021 26086; Microsoft Exchange OWA/ECP/Autodiscover probe; Probing for exposed secret / credential files	Hacking Web App Attack
🇺🇸 abenage	2026-10-29 06:05:48 (20 hours ago)	159.223.132.86 - - [29/Oct/2026:00:05:46 -0600] "GET /console/ HTTP/1.1" 404 162 "-" "Mozilla/5.0 (l9scan/2.0.2383e29323e2434313e2933313; +https://leakix.net)"	Bad Web Bot Web App Attack

Showing 1 to 15 of 7059 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.241.154.174

🇨🇦 173.32.225.93

🇸🇬 103.189.234.134

🇵🇱 77.236.5.68

🇧🇪 35.210.57.153

🇨🇳 27.223.91.83

🇨🇳 27.193.239.122

🇯🇵 8.216.3.215

🇺🇸 206.189.65.113

🇧🇪 198.235.24.133

🇧🇷 191.210.72.37

🇨🇳 183.230.9.103

🇫🇷 84.247.161.119

🇳🇱 64.205.72.125

🇨🇦 47.54.210.245

🇧🇪 35.206.146.107

🇺🇦 31.43.45.225

🇺🇸 216.25.89.111

🇰🇷 211.46.177.174

🇧🇷 201.71.192.108