JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.223.45.46

Neutral Activity

Abuse Confidence Score

0% Low Risk

71 reports

34 reporters · latest 1 year ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.223.45.46 has been reported 71 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

71 from 34 distinct reporters

First reported

October 31st 2022

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 tjs	2025-08-27 21:45:00 UTC · (1 year ago)	web attack, shell attempt	Hacking Web App Attack
🇺🇸 mawan	2025-08-22 20:11:19 UTC · (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
Anonymous	2025-08-22 20:03:35 UTC · (1 year ago)	Bot / scanning and/or hacking attempts: GET /database.php HTTP/1.1, GET / HTTP/1.1, GET /cmd.php HTTP/1.1, GET /upload.php HTTP/1.1, GET /download.php HTTP/1.1, GET /wp-class.php HTTP/1.1, GET /restore.php HTTP/1.1, GET /error.php HTTP/1.1, GET /comm ... show more Bot / scanning and/or hacking attempts: GET /database.php HTTP/1.1, GET / HTTP/1.1, GET /cmd.php HTTP/1.1, GET /upload.php HTTP/1.1, GET /download.php HTTP/1.1, GET /wp-class.php HTTP/1.1, GET /restore.php HTTP/1.1, GET /error.php HTTP/1.1, GET /command.php HTTP/1.1, GET /session.php HTTP/1.1, GET /logout.php HTTP/1.1, GET /cron.php HTTP/1.1, GET /eval.php HTTP/1.1, GET /shell.php HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2025-08-22 19:48:12 UTC · (1 year ago)	Bot / seems abusive / Apache connections: 82	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-08-22 11:16:31 UTC · (1 year ago)	159.223.45.46 - - [22/Aug/2025:14:16:27 +0300] "GET /wp-includes/class-wp-other.php HTTP/1.1" 404 2782 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.1 ... show more 159.223.45.46 - - [22/Aug/2025:14:16:27 +0300] "GET /wp-includes/class-wp-other.php HTTP/1.1" 404 2782 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇮🇩 Burayot	2025-08-22 02:56:35 UTC · (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 159.223.45.46 (SG/Singapore/-): 1 in the last 3600 secs	Web App Attack
🇩🇪 ps-center	2025-08-22 02:36:14 UTC · (1 year ago)	ABV: Web Attack GET /wp-includes/class-wp-other.php	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2025-08-21 20:45:30 UTC · (1 year ago)	159.223.45.46 - - [21/Aug/2025:23:45:29 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 276 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112 ... show more 159.223.45.46 - - [21/Aug/2025:23:45:29 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 276 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
Anonymous	2025-08-21 14:33:11 UTC · (1 year ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-content.php	Web App Attack
🇸🇬 pusathosting.com	2025-08-21 14:15:04 UTC · (1 year ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇺🇸 kosada.com	2025-08-21 14:09:17 UTC · (1 year ago)	Web vulnerability probing	Web App Attack
🇺🇦 URAN Publishing Service	2025-08-21 13:32:13 UTC · (1 year ago)	159.223.45.46 - - [21/Aug/2025:16:26:27 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 159.223.45.46 - - [21/Aug/2025:16:32:11 +0 ... show more 159.223.45.46 - - [21/Aug/2025:16:26:27 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 159.223.45.46 - - [21/Aug/2025:16:32:11 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
🇮🇩 hermawan	2025-08-21 12:16:47 UTC · (1 year ago)	[Thu Aug 21 19:15:55.389910 2025] [security2:error] [pid 316716:tid 140634934363840] [client 159.223.45.46:56087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/corerule ... show more [Thu Aug 21 19:15:55.389910 2025] [security2:error] [pid 316716:tid 140634934363840] [client 159.223.45.46:56087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "320"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aKcN-4PRhhOzZ1qxVrGnsAAAAgE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[316790] [sV8YDd+C1Ec] [aKcN-4PRhhOzZ1qxVrGnsAAAAgE] keep_alive=[0] [2025-08-21 19:15:55.389919] [R:aKcN-4PRhhOzZ1qxVrGnsAAAAgE] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8' Accept-Language ... show less	Hacking Web App Attack
🇺🇸 gu-alvareza	2025-08-21 07:05:08 UTC · (1 year ago)	WordPress.REST.API.Username.Enumeration.Information.Disclosure	Web App Attack
🇺🇸 jormaster3k	2025-08-21 06:34:28 UTC · (1 year ago)	Attack against Apache (too many 404s)	Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 183.160.249.217

🇹🇷 104.28.244.150

🇳🇱 64.205.72.239

🇨🇱 190.82.189.85

🇳🇱 176.65.149.97

🇰🇷 175.214.20.171

🇺🇸 172.212.227.97

🇨🇳 110.178.50.71

🇧🇬 79.124.40.170

🇳🇱 64.205.72.235

🇳🇱 64.205.72.228

🇺🇸 45.63.4.69

🇬🇧 35.203.210.81

🇺🇸 18.221.124.238

🇳🇱 192.253.248.226

🇬🇧 192.248.150.180

🇧🇷 177.145.197.154

🇺🇸 172.210.12.88

🇫🇷 169.58.80.127

🇦🇷 168.196.35.18