159.223.8.68
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
Abuse Reports
Total reports
16 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8041
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1133)
Source port: 61003
TTL: 236
Packet length: 44
TOS: 0x00
This report (for 159.223.8.68) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
2026-11-04 02:36:38 warning[3489029]: host unknown[159.223.8.68]: unauthorized access attempted: tcp/53
|
Port Scan Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 8181.
|
Port Scan Hacking | |
| 🇨🇦 senkodev |
|
Brute-Force SSH | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 nyt |
WP login POST blocked by WAF, Bare UA + POST
|
Brute-Force Web App Attack | |
| 🇺🇸 nyt |
WP Author Enumeration, WP login POST blocked by WAF, Bare UA + POST
|
Brute-Force Web App Attack | |
| 🇫🇷 masterguru |
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)
|
Hacking | |
| 🇫🇷 debaba |
aktiv
159.223.8.68 - - [02/Nov/2026:03:55:14 +0000] "POST /wp-login.php HTTP/1.1" 200 12590 "-" "Mozilla/5.0"
159.223.8.68 - - [02/Nov/2026:03:56:12 +0000]
...
|
Brute-Force Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 throny |
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0
Requested, e.g.:
- nextcloud.[REDACTED]/wp-login.php
|
Web App Attack | |
| 🇺🇸 directorioeducativo.com |
GET URL: "/wp-login.php" Agent: "Mozilla/5.0"
|
Web App Attack | |
| 🇵🇱 Budyn |
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: pma.budyn.top | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]
|
Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown