JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.119.97

159.223.119.97 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.119.97

Whois 159.223.119.97

IP Abuse Reports for 159.223.119.97:

This IP address has been reported a total of 33 times from 30 distinct sources. 159.223.119.97 was first reported on November 26th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 PENJAGA.AUM	2026-10-23 00:17:12 (1 hour ago)	159.223.119.97 - Attack: Possible XSS attack, js event handler	Web App Attack SQL Injection Spoofing
🇩🇪 Lino Project	2026-10-22 03:43:33 (21 hours ago)	159.223.119.97 - - [22/Oct/2026:05:43:30 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 679 "-" "Mozilla ... show more 159.223.119.97 - - [22/Oct/2026:05:43:30 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-10-21 22:17:48 (1 day ago)		Brute-Force Web App Attack
🇺🇸 HJ5Ss4Ju	2026-10-21 19:17:13 (1 day ago)	Wordfence firewall block	Web App Attack
Anonymous	2026-10-21 13:36:59 (1 day ago)	[ns65.kdns.gr] httpd-suspicious-path: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.log ... show more [ns65.kdns.gr] httpd-suspicious-path: sites=www.plaero.gr; logs=/var/log/httpd/domains/plaero.gr.log; samples=//wp-includes/wlwmanifest.xml \| //?author=1 \| //?author=2 show less	Hacking Web App Attack
Anonymous	2026-10-21 13:18:11 (1 day ago)	159.223.119.97 arduino.ua [21/Oct/2026:16:18:10 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" ... show more 159.223.119.97 arduino.ua [21/Oct/2026:16:18:10 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 0.342 436 ... show less	Hacking SQL Injection Web App Attack
🇧🇾 lns.bz	2026-10-21 12:43:02 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇧🇷 ICS Labs	2026-10-20 16:50:38 (2 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.	Brute-Force
🇫🇷 applemooz	2026-10-20 00:50:32 (3 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇳🇱 thedreamer.nl	2026-10-20 00:02:24 (3 days ago)	159.223.119.97 - - [20/Oct/2026:01:59:44 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 ... show more 159.223.119.97 - - [20/Oct/2026:01:59:44 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Bergen" "40.79640" "-74.02030" 159.223.119.97 - - [20/Oct/2026:01:59:45 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Bergen" "40.79640" "-74.02030" 159.223.119.97 - - [20/Oct/2026:01:59:45 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Bergen" "40.79640" "-74.02030" 159.223.119.97 - - [20/Oct/2026:01:59:45 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-19 23:53:03 (3 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-10-19 22:16:35 (3 days ago)		Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-10-19 20:07:58 (3 days ago)	[19/Oct/2026:23:07:57 +0300] -- 159.223.119.97 Ban reason: Scanner [CMS_GENERIC] \| Request: GET //wp ... show more [19/Oct/2026:23:07:57 +0300] -- 159.223.119.97 Ban reason: Scanner [CMS_GENERIC] \| Request: GET //wp-includes/wlwmanifest.xml HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-10-19 19:41:05 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: //site/wp-includes/wlwmanifest.xml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-10-19 19:25:46 (3 days ago)	[redacted] 159.223.119.97 - - [19/Oct/2026:21:25:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" ... show more [redacted] 159.223.119.97 - - [19/Oct/2026:21:25:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 159.223.119.97 - - [19/Oct/2026:21:25:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 159.223.119.97 - - [19/Oct/2026:21:25:41 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 159.223.119.97 - - [19/Oct/2026:21:25:42 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 159.223.119.97 - - [19/Oct/2026:21:25:43 +0200] "POST //xmlrpc.php H ... show less	Hacking Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.105.147.117

🇬🇧 154.16.44.87

🇵🇰 153.117.9.47

🇺🇸 91.230.168.77

🇫🇷 85.217.140.24

🇺🇸 76.195.202.192

🇬🇧 45.133.173.43

🇩🇪 37.46.16.90

🇺🇸 20.169.55.170

🇬🇧 5.252.83.79

🇬🇧 2.57.17.94

🇨🇳 218.11.1.3

🇧🇷 177.38.150.42

🇵🇱 151.115.32.9

🇮🇩 139.194.246.3

🇺🇸 98.83.215.204

🇷🇴 92.118.39.71

🇫🇷 91.231.89.83

🇫🇷 91.231.89.82

🇺🇸 91.230.168.74