AbuseIPDB » 159.223.181.122
159.223.181.122
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸
United States of America
City
North Bergen, New Jersey
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 159.223.181.122 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
159.223.181.122 was first reported on
January 17th 2026 , and the most recent report was
5 months ago
Old Reports:
The most recent abuse report for this IP address is from
5 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇹🇷
rtbh.com.tr
2026-01-28 08:11:16
(5 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
arirabinowitz.com
2026-01-19 21:25:00
(5 months ago)
159.223.181.122 - - [18/Jan/2026:01:29:10 -0500] "POST /api/upload HTTP/1.1" 404 29326 "-" "Mozilla/ ...
show more
159.223.181.122 - - [18/Jan/2026:01:29:10 -0500] "POST /api/upload HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:87.0) Gecko/20100101 Firefox/87.0"
show less
Hacking
Web App Attack
🇺🇸
Starburst SysOp Team
2026-01-19 07:20:58
(5 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)
Hacking
Bad Web Bot
2026-01-19 06:24:45
(5 months ago)
[Mon Jan 19 07:24:44.117025 2026] [access_compat:error] [pid 21783] [client 159.223.181.122:45758] A ...
show more
[Mon Jan 19 07:24:44.117025 2026] [access_compat:error] [pid 21783] [client 159.223.181.122:45758] AH01797: client denied by server configuration: /var/www/html/geoserver
[Mon Jan 19 07:24:44.442971 2026] [access_compat:error] [pid 22988] [client 159.223.181.122:45774] AH01797: client denied by server configuration: /var/www/html/geoserver
[Mon Jan 19 07:24:44.776843 2026] [access_compat:error] [pid 3181] [client 159.223.181.122:45776] AH01797: client denied by server configuration: /var/www/html/wfs
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-01-18 23:34:30
(5 months ago)
Brute-Force
Web App Attack
🇮🇪
RoboSOC
2026-01-18 13:12:59
(5 months ago)
Spring Cloud Gateway Code Injection Vulnerability, PTR: PTR record not found
Hacking
🇮🇹
Rosh
2026-01-18 06:23:39
(5 months ago)
[01/18/26 07:23:39] Unauthorized request HTTP/1.1 404 on port 443
Hacking
Web App Attack
2026-01-17 23:48:13
(5 months ago)
Fail2Ban triggered
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 23:09:44
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 159.223.181.122 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 159.223.181.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 18:09:36.888736 2026] [security2:error] [pid 17392:tid 17392] [client 159.223.181.122:51016] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.49|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.49"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aWwWsGj8zdg1wh8ExkajAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: