JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.212.244

159.223.212.244 was found in our database!

This IP was reported 232 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.212.244

Whois 159.223.212.244

IP Abuse Reports for 159.223.212.244:

This IP address has been reported a total of 232 times from 136 distinct sources. 159.223.212.244 was first reported on January 14th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 HeliJP	2026-03-04 05:45:23 (3 months ago)	2026-03-04T05:10:24Z - Recognized attacks\bad behavior from IP address 159.223.212.244 on port 443\8 ... show more 2026-03-04T05:10:24Z - Recognized attacks\bad behavior from IP address 159.223.212.244 on port 443\80 (9 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇺🇸 ersei.net	2026-03-04 02:14:38 (3 months ago)	Brute force multiple 403s	Brute-Force
🇨🇳 ThreatBook.io	2026-03-04 00:47:03 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/159.223.212.244 202 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/159.223.212.244 2026-03-03 01:40:13 /favicon.ico 2026-03-03 01:39:57 /alive.php 2026-03-03 01:40:10 / 2026-03-03 01:39:55 /ab2g 2026-03-03 01:40:15 / 2026-03-03 01:39:56 /ab2h 2026-03-03 01:40:07 / 2026-03-03 01:40:12 /t4 2026-03-03 01:40:16 /teorema505?t=1 show less	Web App Attack
🇵🇱 webadmin	2026-03-03 22:51:42 (3 months ago)	2026-03-03T23:51:24.893193+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, ... show more 2026-03-03T23:51:24.893193+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, server: 95.51.51.110, request: "GET", url: http://95.51.51.110/ [404]: Not Found 2026-03-03T23:51:26.193605+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, server: 95.51.51.110, request: "GET", url: http://95.51.51.110/form.html [404]: Not Found 2026-03-03T23:51:28.578282+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, server: 95.51.51.110, request: "GET", url: http://95.51.51.110/upl.php [404]: Not Found 2026-03-03T23:51:33.351139+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, server: 95.51.51.110, request: "GET", url: http://95.51.51.110/t4 [404]: Not Found 2026-03-03T23:51:41.264357+01:00 stat.sai.pl stat-backend[3707245]: [error] client: 159.223.212.244, server: 95.51.51.110, request: "GET", url: http://95.51.51.110/geoip/ [404]: Not Found ... show less	Web App Attack
🇦🇺 afleventoffice.com.au	2026-03-03 21:47:18 (3 months ago)	\x16\x03\x01	Web App Attack
🇳🇱 DrLex0	2026-03-03 18:30:38 (3 months ago)	Probing for various exploits 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /favicon.ico HT ... show more Probing for various exploits 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /favicon.ico HTTP/1.1" 301 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /1.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /upl.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0" 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /systembc/password.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 159.223.212.244 80 - [03/Mar/2026:18:30:38 +0000] "GET /password.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-03-03 16:44:09 (3 months ago)	Host header is a numeric IP address. Pattern match "^ (920350-159)	Hacking Bad Web Bot
🇺🇸 gamabe	2026-03-03 16:11:49 (3 months ago)	Detected crowdsecurity/http-backdoors-attempts attack pattern. Reported by CrowdSec IDS.	Hacking
Anonymous	2026-03-03 15:41:31 (3 months ago)	[Tue Mar 03 16:41:30.218794 2026] [php7:error] [pid 16041] [client 159.223.212.244:60904] script '/v ... show more [Tue Mar 03 16:41:30.218794 2026] [php7:error] [pid 16041] [client 159.223.212.244:60904] script '/var/www/sites/default/upl.php' not found or unable to stat [Tue Mar 03 16:41:30.387132 2026] [php7:error] [pid 16043] [client 159.223.212.244:60958] script '/var/www/sites/default/1.php' not found or unable to stat [Tue Mar 03 16:41:30.464139 2026] [php7:error] [pid 16049] [client 159.223.212.244:60968] script '/var/www/sites/default/password.php' not found or unable to stat ... show less	Brute-Force Web App Attack
Anonymous	2026-03-03 15:03:48 (3 months ago)	159.223.212.244 - - [04/Mar/2026:00:03:46 +0900] "GET / HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows ... show more 159.223.212.244 - - [04/Mar/2026:00:03:46 +0900] "GET / HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 159.223.212.244 - - [04/Mar/2026:00:03:47 +0900] "GET /form.html HTTP/1.1" 403 440 "-" "curl/8.1.2" 159.223.212.244 - - [04/Mar/2026:00:03:47 +0900] "GET /upl.php HTTP/1.1" 403 440 "-" "Mozilla/5.0" ... show less	Brute-Force
🇺🇸 MPL	2026-03-03 12:58:15 (3 months ago)	tcp/80 (6 or more attempts)	Port Scan
🇺🇸 MPL	2026-03-03 12:58:15 (3 months ago)	tcp/80	Port Scan
🇬🇧 www.elivecd.org	2026-03-03 11:46:42 (3 months ago)	2026/03/03 11:46:41 [error] 3733632#3733632: 108102 FastCGI sent in stderr: "PHP message: BOT WARNI ... show more 2026/03/03 11:46:41 [error] 3733632#3733632: 108102 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 159.223.212.244, you should ban it for long time (honeypot form function-abuseipdb)" while reading response header from upstream, client: 159.223.212.244, server: www.elivecd.org, request: "GET /ab2g HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.2-fpm-elivewp.sock:", host: "78.141.243.157" ... show less	Web Spam Email Spam
🇹🇭 MWA SOC	2026-03-03 07:48:41 (3 months ago)		Port Scan
Anonymous	2026-03-03 06:08:17 (3 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack

Showing 1 to 15 of 232 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.167.92

🇺🇸 204.48.28.23

🇧🇷 201.17.133.138

🇺🇸 195.184.76.217

🇳🇱 185.223.235.27

🇵🇱 185.16.38.16

🇨🇴 148.222.199.208

🇮🇩 125.161.58.110

🇧🇬 91.191.209.118

🇳🇱 89.21.67.161

🇳🇱 81.19.216.90

🇩🇪 69.5.169.85

🇺🇸 65.49.1.61

🇺🇸 43.153.123.185

🇧🇪 34.156.38.18

🇯🇵 8.216.17.216

🇺🇸 208.107.242.192

🇹🇭 203.154.158.195

🇺🇸 195.184.76.79

🇨🇳 119.120.225.223