JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.34.240

159.223.34.240 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.34.240

Whois 159.223.34.240

IP Abuse Reports for 159.223.34.240:

This IP address has been reported a total of 39 times from 30 distinct sources. 159.223.34.240 was first reported on July 14th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 22:43:08 (2 hours ago)	(mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 18:43:03.420376 2026] [security2:error] [pid 5201:tid 5230] [client 2002:9fdf:22f0::9fdf:22f0:50033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.asetiadi.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.asetiadi.net"] [uri "/wp-json/wp/v2/users"] [unique_id "al1S940oRxa2P9j-qxqTYgAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-19 22:32:04 (2 hours ago)	Wordfence waf block on fairregistry	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-19 22:27:15 (2 hours ago)	(wp_login_try) srv103 WP Login Attempt 2002:9fdf:22f0::9fdf:22f0 (US/United States/-): 10 in the las ... show more (wp_login_try) srv103 WP Login Attempt 2002:9fdf:22f0::9fdf:22f0 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 19:55:58 (5 hours ago)	(mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 15:55:53.005763 2026] [security2:error] [pid 31138:tid 31153] [client 2002:9fdf:22f0::9fdf:22f0:53383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.gabegabel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gabegabel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al0ryWtTBJw1v0QjG7DTqAAAAMw"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 19:17:15 (5 hours ago)	(mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 15:17:02.202950 2026] [security2:error] [pid 782:tid 782] [client 2002:9fdf:22f0::9fdf:22f0:56151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.weddingmusicguitar.benshermanguitar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.weddingmusicguitar.benshermanguitar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al0iri3KICAxnE0mqyEmawAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-19 18:14:19 (6 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 18:11:55 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9fdf:22f0::9fdf:22f0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:11:49.053377 2026] [security2:error] [pid 15350:tid 15350] [client 2002:9fdf:22f0::9fdf:22f0:60564] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|artspacecleveland.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artspacecleveland.org"] [uri "/wp-json/wp/v2/users"] [unique_id "al0TZbAsUh-zEL4UCsV2LwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-19 16:46:17 (8 hours ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇳🇱 debestelapp	2026-07-19 16:15:04 (8 hours ago)		Exploited Host
🇦🇺 paulshipley.com.au	2026-07-19 14:54:07 (10 hours ago)	levellapromotions.com.au:443 159.223.34.240 - - [20/Jul/2026:00:54:05 +1000] "GET /?author=1 HTTP/1. ... show more levellapromotions.com.au:443 159.223.34.240 - - [20/Jul/2026:00:54:05 +1000] "GET /?author=1 HTTP/1.1" 404 322808 "https://t.co/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Web App Attack
🇳🇴 Bots.go.to.hell	2026-07-19 12:20:19 (12 hours ago)	This IP was detected by CrowdSec triggering custom/http-bad-crawler-ban	Web App Attack Bad Web Bot
🇺🇸 RogueAutomata	2026-07-19 10:54:21 (14 hours ago)	Detected malicious request: GET /license.txt Detections triggered: Automated user-agent	Web App Attack
🇩🇪 Starburst SysOp Team	2026-07-19 09:44:50 (15 hours ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 240.34.223.159.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 240.34.223.159.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-nue6-2) show less	Hacking
🇫🇷 EvoX	2026-07-19 08:06:43 (17 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM clien ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 5985 POST /wsman User-Agent: Python WinRM client Accept: / Accept-Encoding: gzip, deflate; 5985 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 donarev419	2026-07-19 06:39:01 (18 hours ago)	Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 167.253.66.144 ... show more Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 167.253.66.144:5985 User-Agent: Python WinRM client Accept-Encoding: g show less	Port Scan Hacking

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 65.49.1.174

🇳🇱 5.187.35.26

🇮🇳 2404:ca40:fa20:0:9cb7:11d7:88bc:dd56

🇸🇬 157.52.92.39

🇸🇦 156.244.10.233

🇺🇸 147.93.146.163

🇳🇱 86.54.31.44

🇱🇹 62.60.130.219

🇭🇰 47.83.185.162

🇺🇸 47.77.223.242

🇳🇱 45.148.10.151

🇸🇬 43.134.51.147

🇨🇦 20.151.10.161

🇬🇧 5.226.140.9

🇷🇴 2.57.121.112

🇺🇸 2607:f8b0:4023:1009::120

🇰🇷 222.108.100.117

🇨🇭 209.99.190.200

🇺🇸 192.158.140.144

🇧🇷 177.53.6.4