159.223.1.119

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
28 reports
22 reporters · latest 18 hours ago
ISP
DigitalOcean, LLC
Usage Type
Content Delivery Network
ASN
AS14061
Domain Name
digitalocean.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇫🇷 France 2 🇵🇱 Poland 2
Most common categories Web App Attack 4 Hacking 4 Brute-Force 3 Bad Web Bot 2 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
*Port Scan* detected from 159.223.1.119 (NL/The Netherlands/North Holland/Amsterdam/-/[redacted]).
Port Scan
🇩🇪 goodbytes
Suricata IDS, web server and web honeypot logs on our public servers, UTC. 2026-11-12 21:40:57 to 2026-11-12 21:40:57: 1 alerts. Evidence: 2026-11-12 21:40:57 IDS: ET SCAN Suspicious inbound to MSSQL port 1433 (TCP/1433)
Port Scan
🇸🇪 vaia.cloud
crowdsecurity/http-cve-probing
Brute-Force Web App Attack
🇵🇱 Budyn
Bad Web Bot Web App Attack
🇫🇷 masterguru
(wordpress) Apache: Failed WordPress login from 159.223.1.119 (NL/The Netherlands/-): 10 in the last 3600 secs (0-195)
Hacking
Anonymous
IP matched detection query 20 more in short time bad rqs.
Brute-Force Web App Attack Hacking
Anonymous
(wordpress) Failed wordpress login from 159.223.1.119 (NL/The Netherlands/-)
Brute-Force
🇫🇷 masterguru
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)
Hacking
🇵🇱 Budyn
Bad Web Bot Web App Attack
🇬🇧 venus.launch.bz
(wpscan) WordPress probe detected from 159.223.1.119 (NL/The Netherlands/-)
Hacking
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.223.1.119 (NL/The Netherlands/-): 2 in the last 3600 secs (0-201)
Hacking
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇫🇮 YF
Suspicious ISPConfig/Webmin Access
Brute-Force Web App Attack
🇩🇪 Xorog
[Sat May 24 04:44:59 AM CEST 2025] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
Port Scan Hacking Brute-Force SSH
🇩🇪 invalidLuca
[UFW2] Unauthorized connection attempt from 159.223.1.119
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.149.211
🇨🇳 219.129.96.2
🇬🇧 192.248.150.180
🇦🇿 185.146.113.101
🇪🇨 181.199.61.38
🇨🇳 171.37.161.193
🇺🇸 162.216.150.195
🇺🇸 162.216.149.101
🇭🇰 154.92.2.59
🇳🇱 151.245.151.39
🇨🇳 121.29.4.60
🇨🇳 118.212.121.219
🇺🇸 109.105.210.12
🇩🇪 104.29.146.236
🇮🇳 103.168.198.6
🇩🇪 85.155.14.247
🇳🇱 77.239.124.153
🇬🇧 35.203.210.200
🇲🇾 14.192.214.37
🇺🇸 216.25.89.128
feedback