JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.223.72.223

Recent Activity

Abuse Confidence Score

100% Critical

63 reports

58 reporters · latest 1 day ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

63 from 58 distinct reporters

First reported

November 11th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇩🇪 Germany 15 🇫🇷 France 12 🇺🇸 United States of America 7

Most common categories Web App Attack 45 Brute-Force 19 Bad Web Bot 12 Hacking 10 Port Scan 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-14 03:00:26 UTC · (1 day ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇫🇷 SpaceHost-Server	2026-11-12 23:16:18 UTC · (2 days ago)		Brute-Force Web App Attack
🇧🇪 Ivo Vynckier	2026-11-12 15:17:00 UTC · (2 days ago)	159.223.72.223 - - [11/Nov/2026:21:12:06 +0100] "GET /wp-includes/js/json2.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 159.223.72.223 - - [11/No ... show more 159.223.72.223 - - [11/Nov/2026:21:12:06 +0100] "GET /wp-includes/js/json2.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 159.223.72.223 - - [11/Nov/2026:21:12:20 +0100] "GET /wp/wp-includes/js/json2.js HTTP/1.1" 301 313 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0" 159.223.72.223 - - [11/Nov/2026:21:12:36 +0100] "GET /wordpress/wp-includes/js/json2.js HTTP/1.1" 301 320 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 159.223.72.223 - - [11/Nov/2026:21:12:45 +0100] "GET /blog/wp-includes/js/json2.js HTTP/1.1" 301 315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0.1) Gecko/20100101 Firefox/119.0.1" show less	Web App Attack
🇩🇪 IVski.com	2026-11-12 13:56:36 UTC · (2 days ago)	IVski WAF \| WordPress core file probe - requesting wp-includes/js/json2.js	Hacking Brute-Force Web App Attack
🇫🇷 breubit	2026-11-12 11:16:06 UTC · (2 days ago)	159.223.72.223 - - [12/Nov/2026:12:16:06 +0100] "GET /wp-includes/js/json2.js HTTP/1.1" 301 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" ...	Web App Attack
🇫🇷 tecnoacquisti.com	2026-11-12 11:12:52 UTC · (2 days ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇩🇪 macrob	2026-11-12 10:12:20 UTC · (2 days ago)	2026/11/12 10:12:12 [error] 2031557#2031557: 31056491 access forbidden by rule, client: 159.223.72.223, server: binixo.es, request: "GET /wp-includes/js/json2.js HTTP/1.1", host: "binixo.es" 2026/11/12 10:12:12 [error] 2031557#2031557: 31056503 acc ... show more 2026/11/12 10:12:12 [error] 2031557#2031557: 31056491 access forbidden by rule, client: 159.223.72.223, server: binixo.es, request: "GET /wp-includes/js/json2.js HTTP/1.1", host: "binixo.es" 2026/11/12 10:12:12 [error] 2031557#2031557: 31056503 access forbidden by rule, client: 159.223.72.223, server: binixo.pe, request: "GET /wp-includes/js/json2.js HTTP/2.0", host: "binixo.pe" 2026/11/12 10:12:19 [error] 2031558#2031558: *31056887 access forbidden by rule, client: 159.223.72.223, server: binixo.com.br, request: "GET /wp-includes/js/json2.js HTTP/2.0", host: "binixo.com.br" ... show less	Web App Attack
🇳🇱 Hans Renses	2026-11-12 08:22:26 UTC · (2 days ago)	Web app attack: 6 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.	Web App Attack Hacking
🇺🇸 ArturShelby	2026-11-12 06:46:39 UTC · (2 days ago)	Suspicious path access: /wp-includes/js/json2.js	Web App Attack
Anonymous	2026-11-12 06:40:05 UTC · (2 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-11-12 06:23:21 UTC · (2 days ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇫🇮 as211431.net	2026-11-12 06:11:09 UTC · (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /test/wp-includes/js/json2.js UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0 This report ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /test/wp-includes/js/json2.js UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 Sakusen	2026-11-12 05:56:40 UTC · (2 days ago)	Automated web scanning: 7 reqs, 7 paths probed, 7 returned 404; probed: 7 other	Bad Web Bot
🇬🇧 pinguin	2026-11-12 05:53:13 UTC · (2 days ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /test/wp-includes/js/json2.js UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Saf ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /test/wp-includes/js/json2.js UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇲🇽 octageeks.com	2026-11-12 05:14:59 UTC · (3 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 190.171.95.70

🇹🇼 128.14.227.52

🇬🇧 89.37.172.158

🇺🇸 45.63.4.69

🇨🇳 36.103.243.179

🇺🇸 34.44.89.35

🇩🇪 195.63.23.167

🇧🇷 191.250.157.105

🇨🇳 182.127.140.171

🇧🇷 177.47.162.185

🇱🇹 141.98.10.44

🇫🇷 85.217.140.44

🇩🇪 69.5.169.233

🇹🇼 198.235.24.101

🇿🇦 165.165.116.35

🇺🇸 52.146.88.12

🇨🇳 36.49.30.98

🇨🇦 34.19.141.153

🇻🇳 210.245.30.140

🇧🇷 205.210.31.252