This IP address has been reported a total of
134
times from
102 distinct
sources.
159.223.236.5 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 32
reports;
Germany
with 20
reports;
Netherlands
with 12
reports.
The most common categories in these recent reports were:
Web App Attack
99
times;
Bad Web Bot
43
times;
Brute-Force
37
times;
Hacking
23
times;
Port Scan
9
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-12.
show less
Automated honeypot detection. blocked ip against a Next.js application. Paths: /new, /apps/manufactu ...
show moreAutomated honeypot detection. blocked ip against a Next.js application. Paths: /new, /apps/manufacturing/public/vendor/laravel-filemanager/js/script.js, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Blocked at the edge.
show less
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show moreCrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-13T10:48:56.670741455Z. Context: http_status=200
show less
AetherGuard WAF blocked: Matched phrase "/.git/" at REQUEST_URI.
Target: management.aetherguard.xyz/ ...
show moreAetherGuard WAF blocked: Matched phrase "/.git/" at REQUEST_URI.
Target: management.aetherguard.xyz/.git/config
(2 attempts logged from this IP)
show less
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show moreProbed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-13T10:05:37Z sensor=fail2ban role=web-canary
src=159.223.236.5
show less
