JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.70.104

159.223.70.104

Neutral Activity

30 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.223.70.104 has been reported 30 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.223.70.104:

This IP address has been reported a total of 30 times from 13 distinct sources. 159.223.70.104 was first reported on November 19th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 grinthorstnl	2025-11-30 23:59:02 (9 months ago)	Auto-ban: >500 bad req(40x/50x)/5min on 2025-11-29	Hacking Web App Attack SSH
🇫🇷 dynamix	2025-11-28 19:52:45 (9 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2025-11-26 08:25:08 (9 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2025-11-23 17:49:40 (9 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 12:27:29 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 07:27:24.691025 2025] [security2:error] [pid 5753:tid 5753] [client 159.223.70.104:47350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.otfes.com"] [uri "/.env"] [unique_id "aSL9rJmXKJgY2KYISwWGmAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-11-23 05:22:30 (9 months ago)	364 requests with url.path *.env	Brute-Force Bad Web Bot
Anonymous	2025-11-22 13:43:21 (9 months ago)	159.223.70.104 - - [22/Nov/2025:22:43:19 +0900] "GET //.aws/config HTTP/1.1" 403 496 "-" "Mozlila/5. ... show more 159.223.70.104 - - [22/Nov/2025:22:43:19 +0900] "GET //.aws/config HTTP/1.1" 403 496 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.223.70.104 - - [22/Nov/2025:22:43:19 +0900] "GET //.aws/credentials HTTP/1.1" 403 496 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.223.70.104 - - [22/Nov/2025:22:43:20 +0900] "GET //.env HTTP/1.1" 403 496 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2025-11-22 11:05:42 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 06:05:38.374855 2025] [security2:error] [pid 14730:tid 14730] [client 159.223.70.104:50308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceanicpier.com"] [uri "/.env"] [unique_id "aSGZAt26iAbks_0biZ6FEwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-22 06:45:46 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 01:45:38.765971 2025] [security2:error] [pid 29123:tid 29123] [client 159.223.70.104:52374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dailybeautysupply.com"] [uri "/.env"] [unique_id "aSFcEnV2__sSNxc3WhjD5QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-22 05:10:47 (9 months ago)	Excessive 404 errors	Brute-Force Web App Attack
Anonymous	2025-11-21 23:58:34 (9 months ago)	Bot / scanning and/or hacking attempts: GET //.env.save HTTP/1.1, GET //.env.stage HTTP/1.1, GET //. ... show more Bot / scanning and/or hacking attempts: GET //.env.save HTTP/1.1, GET //.env.stage HTTP/1.1, GET //.env.settings HTTP/1.1, GET /.env.production.local HTTP/1.1, GET //.env.secure HTTP/1.1, GET /.env.stage HTTP/1.1, GET /?phpinfo=1 HTTP/1.1, GET /.env.secure HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.private HTTP/1.1, GET //.env.template HTTP/1.1, GET //access_logs.yml HTTP/1.1, GET /activity_logger.rb HTTP/1.1, GET /admin_log.txt HTTP/1.1, GET //activity_logger.rb HTTP/1.1, GET //admin/server_info.php HTTP/1.1, GET //admin_log.txt HTTP/1.1, GET //admin/sys_phpinfo.php HTTP/1.1, GET /admin/server_info.php HTTP/1.1, GET /admin/sys_phpinfo.php HTTP/1.1, GET /admin/phpinfo.php HTTP/1.1, GET //admin/phpinfo.php HTTP/1.1, GET /access_logs.yml HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-21 22:28:57 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 17:28:54.482401 2025] [security2:error] [pid 5316:tid 5316] [client 159.223.70.104:50866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gurneysbottleshop.com"] [uri "/.env"] [unique_id "aSDnpivJUz1X18LZSTWD6QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-21 19:27:59 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 159.223.70.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 14:27:52.587550 2025] [security2:error] [pid 34097:tid 34097] [client 159.223.70.104:58214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marxistphilosophy.org"] [uri "/.env"] [unique_id "aSC9OHq915epOt8VMnVLsgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-11-21 16:04:29 (9 months ago)	Multiple WAF Violations	Web App Attack
🇧🇪 taivas.nl	2025-11-21 05:32:18 (9 months ago)	Many_bad_calls	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 171.25.158.74

🇺🇿 89.249.63.6

🇱🇰 220.247.224.226

🇺🇸 195.184.76.13

🇪🇨 186.46.1.172

🇫🇮 147.185.133.83

🇺🇸 139.144.239.74

🇩🇪 130.12.182.196

🇨🇦 74.200.22.56

🇨🇦 65.111.21.148

🇯🇵 34.97.187.242

🇫🇷 207.180.208.109

🇺🇸 162.216.149.131

🇺🇸 148.59.129.132

🇺🇸 148.59.129.21

🇷🇴 86.125.219.201

🇲🇦 81.192.46.29

🇳🇱 77.239.124.207

🇺🇸 66.132.195.18

🇱🇹 62.60.130.253