JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.178.59

159.223.178.59 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	campus360.legadobolognesilab.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.178.59

Whois 159.223.178.59

IP Abuse Reports for 159.223.178.59:

This IP address has been reported a total of 13 times from 11 distinct sources. 159.223.178.59 was first reported on June 22nd 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-08 03:23:03 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:22:59.666668 2026] [security2:error] [pid 25590:tid 25590] [client 159.223.178.59:46510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.21"] [uri "/.env"] [unique_id "af1XE68jcFviLPmVWRwOMQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marcin Stepien	2026-05-08 02:22:49 (3 months ago)	Hit honeypot endpoint /.env. Automated scanner/bot detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 00:55:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 20:55:51.946419 2026] [security2:error] [pid 17927:tid 17927] [client 159.223.178.59:46288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.37"] [uri "/composer.json"] [unique_id "af00l58tg38RaQCC9fUFZQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Brian	2026-05-07 22:01:00 (3 months ago)	probing for git	Web App Attack Hacking
🇺🇸 kuj	2026-05-07 16:47:20 (3 months ago)	2026-05-07T10:47:20.440899-06:00 derp derper[774]: 2026/05/07 10:47:20 http: TLS handshake error fro ... show more 2026-05-07T10:47:20.440899-06:00 derp derper[774]: 2026/05/07 10:47:20 http: TLS handshake error from 159.223.178.59:56814: acme/autocert: missing server name 2026-05-07T10:47:20.547822-06:00 derp derper[774]: 2026/05/07 10:47:20 http: TLS handshake error from 159.223.178.59:56850: acme/autocert: missing server name 2026-05-07T10:47:20.548050-06:00 derp derper[774]: 2026/05/07 10:47:20 http: TLS handshake error from 159.223.178.59:56862: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇯🇵 VXG-NET	2026-05-07 16:45:56 (3 months ago)	port=80, indicator_type=info-leak	Hacking
🇺🇸 TPI-Abuse	2026-05-07 15:54:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.178.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 11:54:10.331899 2026] [security2:error] [pid 10354:tid 10354] [client 159.223.178.59:32974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.6"] [uri "/composer.json"] [unique_id "afy1ohv3X90tMgi-nBm7WAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Wepted	2026-05-07 04:46:08 (3 months ago)	Port scan detected by honeypot	Port Scan Hacking
🇫🇷 dynamix	2026-05-07 03:43:46 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 drewf.ink	2024-05-15 21:26:50 (2 years ago)	[21:26] Port scanning. Port(s) scanned: TCP/9200	Port Scan
🇩🇪 QUADEMU Abuse Dpt	2024-03-11 12:54:03 (2 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Exploited Host
🇧🇬 OHOST.BG	2023-06-22 22:02:16 (3 years ago)	2023-06-23T01:02:09.584424anubis.d-serv.eu sshd[43124]: Failed password for root from 159.223.178.59 ... show more 2023-06-23T01:02:09.584424anubis.d-serv.eu sshd[43124]: Failed password for root from 159.223.178.59 port 52122 ssh2 2023-06-23T01:02:10.347275anubis.d-serv.eu sshd[43802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.178.59 user=root 2023-06-23T01:02:12.488094anubis.d-serv.eu sshd[43802]: Failed password for root from 159.223.178.59 port 54336 ssh2 2023-06-23T01:02:13.245673anubis.d-serv.eu sshd[44552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.178.59 user=root 2023-06-23T01:02:15.798210anubis.d-serv.eu sshd[44552]: Failed password for root from 159.223.178.59 port 58334 ssh2 ... show less	Brute-Force SSH
🇩🇪 davomat	2023-06-22 21:25:09 (3 years ago)	Jun 22 23:24:58 Perseus sshd[264858]: Failed password for root from 159.223.178.59 port 57500 ssh2 J ... show more Jun 22 23:24:58 Perseus sshd[264858]: Failed password for root from 159.223.178.59 port 57500 ssh2 Jun 22 23:25:00 Perseus sshd[264870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.178.59 user=root Jun 22 23:25:02 Perseus sshd[264870]: Failed password for root from 159.223.178.59 port 35390 ssh2 Jun 22 23:25:03 Perseus sshd[264951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.178.59 user=root Jun 22 23:25:05 Perseus sshd[264951]: Failed password for root from 159.223.178.59 port 37584 ssh2 Jun 22 23:25:06 Perseus sshd[265064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.178.59 user=root Jun 22 23:25:08 Perseus sshd[265064]: Failed password for root from 159.223.178.59 port 39902 ssh2 ... show less	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.245.184.230

🇭🇰 118.193.33.216

🇳🇱 81.19.216.88

🇷🇴 80.94.92.55

🇫🇷 77.239.124.205

🇺🇸 64.62.156.129

🇬🇧 217.146.80.100

🇳🇴 194.19.7.82

🇲🇽 187.190.193.108

🇺🇦 185.35.8.89

🇺🇸 173.255.223.62

🇩🇪 150.241.77.28

🇺🇸 96.224.128.20

🇺🇸 91.230.168.249

🇺🇸 71.19.192.251

🇺🇸 47.85.8.171

🇨🇳 36.154.134.146

🇦🇺 35.201.12.242

🇺🇸 13.220.11.201

🇲🇿 197.219.208.58