JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.53.142

159.223.53.142 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 93%: ?

93%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.53.142

Whois 159.223.53.142

IP Abuse Reports for 159.223.53.142:

This IP address has been reported a total of 16 times from 16 distinct sources. 159.223.53.142 was first reported on October 26th 2026, and the most recent report was 33 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-10-27 04:04:25 (33 minutes ago)	Web App Attack	Web App Attack
Anonymous	2026-10-27 03:08:19 (1 hour ago)	2026-10-27T03:08:19.125876+00:00 instance-20260804-1025 wordpress(acbp.org.co)[207727]: XML-RPC auth ... show more 2026-10-27T03:08:19.125876+00:00 instance-20260804-1025 wordpress(acbp.org.co)[207727]: XML-RPC authentication attempt for unknown user admin from 159.223.53.142 ... show less	Web App Attack
🇺🇸 mnsf	2026-10-27 03:05:21 (1 hour ago)	Too many Status 40X (16)	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-10-27 02:13:54 (2 hours ago)	Multiple attempts to attack Wordpress XMLRPC detected: access blocked.	Web App Attack
🇪🇸 robotstxt	2026-10-27 00:28:05 (4 hours ago)	159.223.53.142 - - [27/Oct/2026:00:27:33 +0000] "GET /?author=0 HTTP/1.1" 403 1209 "-" "Mozilla/5.0 ... show more 159.223.53.142 - - [27/Oct/2026:00:27:33 +0000] "GET /?author=0 HTTP/1.1" 403 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" "136.201.9.72" edge="159.223.53.142" 159.223.53.142 - - [27/Oct/2026:00:27:38 +0000] "GET /?author=1 HTTP/1.1" 403 1209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" "-" edge="159.223.53.142" 159.223.53.142 - - [27/Oct/2026:00:27:44 +0000] "GET /?author=2 HTTP/1.1" 403 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" "-" edge="159.223.53.142" 159.223.53.142 - - [27/Oct/2026:00:27:51 +0000] "GET /?author=3 HTTP/1.1" 403 1209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" "-" edge="159.223.53.142" 159.223.53.142 - - [27/Oct/2026:00:27:54 +0000] "GE ... show less	Web App Attack
🇺🇸 JGouin	2026-10-27 00:00:20 (4 hours ago)	159.223.53.142 [26/Oct/2026:20:00:17 -0400] "GET /wp-includes/js/json2.js HTTP/1.1" 200 tarpit_trigg ... show more 159.223.53.142 [26/Oct/2026:20:00:17 -0400] "GET /wp-includes/js/json2.js HTTP/1.1" 200 tarpit_triggered ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-10-26 21:40:26 (6 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇺🇸 lavnet.net	2026-10-26 21:24:26 (7 hours ago)	159.223.53.142 - - [26/Oct/2026:21:23:53 +0000] "GET /wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" ... show more 159.223.53.142 - - [26/Oct/2026:21:23:53 +0000] "GET /wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" 159.223.53.142 - - [26/Oct/2026:21:23:58 +0000] "GET /wp/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 159.223.53.142 - - [26/Oct/2026:21:24:12 +0000] "GET /wordpress/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 159.223.53.142 - - [26/Oct/2026:21:24:13 +0000] "GET /blog/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 159.223.53.142 - - [26/Oct/2026:21:24:23 +0000] "GET /new/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122. ... show less	Brute-Force
🇨🇭 backslash	2026-10-26 20:51:00 (7 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇪🇸 antivoid.xyz	2026-10-26 20:34:40 (8 hours ago)		Brute-Force Web App Attack
🇫🇷 ACE-INFORMATIQUE.NC	2026-10-26 19:00:09 (9 hours ago)	Web App Attack blocked by Fail2ban	Web App Attack
Anonymous	2026-10-26 17:32:07 (11 hours ago)	[redacted] 159.223.53.142 - - [26/Oct/2026:18:31:05 +0100] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 159.223.53.142 - - [26/Oct/2026:18:31:05 +0100] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" [redacted] 159.223.53.142 - - [26/Oct/2026:18:31:45 +0100] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" [redacted] 159.223.53.142 - - [26/Oct/2026:18:31:46 +0100] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" [redacted] 159.223.53.142 - - [26/Oct/2026:18:31:51 +0100] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" [redacted] 159.223.53.142 - - [26/Oct/2026:18:31:54 +010 ... show less	Hacking Web App Attack
🇮🇹 VHosting	2026-10-26 17:00:06 (11 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 masterguru	2026-10-26 12:02:26 (16 hours ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇬🇧 consul.to	2026-10-26 09:30:41 (19 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.105.76.7

🇺🇦 85.114.204.62

🇺🇸 66.132.186.245

🇮🇷 5.202.169.252

🇬🇧 217.146.80.117

🇩🇪 213.209.159.238

🇨🇭 209.99.190.186

🇻🇪 190.205.209.200

🇺🇸 189.104.67.79

🇧🇷 170.80.64.50

🇺🇸 147.124.210.171

🇮🇳 123.253.162.253

🇨🇳 121.229.205.104

🇨🇳 121.61.49.232

🇺🇸 91.230.168.126

🇺🇸 66.240.236.109

🇺🇸 66.132.195.20

🇷🇺 46.191.163.243

🇮🇩 36.73.155.67

🇧🇪 34.78.81.246