JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.80.6

159.223.80.6 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.80.6

Whois 159.223.80.6

IP Abuse Reports for 159.223.80.6:

This IP address has been reported a total of 52 times from 50 distinct sources. 159.223.80.6 was first reported on December 15th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-02 22:11:10 (2 months ago)	Auto-ban: 252 malicious requests on 2026-05-01 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 252 malicious requests on 2026-05-01 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇮🇳 evicky2002	2026-05-02 06:00:00 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-05-01 10:35:04 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-05-01 09:00:59 (2 months ago)	159.223.80.6 - - [01/May/2026:11:00:57 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 472 "- ... show more 159.223.80.6 - - [01/May/2026:11:00:57 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.80.6 - - [01/May/2026:11:00:57 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.80.6 - - [01/May/2026:11:00:58 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.80.6 - - [01/May/2026:11:00:58 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.80.6 - - [01/May/2026:11:00:58 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 472 "-" "Moz ... show less	Brute-Force Web App Attack
🇷🇴 ICT	2026-05-01 08:58:27 (2 months ago)	May 1 11:58:25 wordpress wordpress(acad-icht.tm.edu.ro)[15375]: XML-RPC authentication attempt for ... show more May 1 11:58:25 wordpress wordpress(acad-icht.tm.edu.ro)[15375]: XML-RPC authentication attempt for unknown user admin from 159.223.80.6 May 1 11:58:25 wordpress wordpress(acad-icht.tm.edu.ro)[14453]: XML-RPC authentication attempt for unknown user admin from 159.223.80.6 May 1 11:58:26 wordpress wordpress(acad-icht.tm.edu.ro)[14817]: XML-RPC authentication attempt for unknown user admin from 159.223.80.6 ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-05-01 08:32:06 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇬🇧 Interceptor_HQ	2026-05-01 05:49:32 (2 months ago)	request_uri: / -- automatic report --	Brute-Force Hacking
🇩🇪 mondor.ro	2026-05-01 05:44:17 (2 months ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 159.223.80.6, Reason:[ ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 159.223.80.6, Reason:[(manifest) WordPress wlwmanifest.xml Attack 159.223.80.6 (SG/Singapore/-): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇮🇳 Genhost	2026-05-01 04:54:56 (2 months ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇩🇪 Gwyneth Llewelyn	2026-05-01 04:41:25 (2 months ago)	159.223.80.6 - - [01/May/2026:05:41:23 +0100] "GET /roundcube//wp-includes/wlwmanifest.xml HTTP/2.0" ... show more 159.223.80.6 - - [01/May/2026:05:41:23 +0100] "GET /roundcube//wp-includes/wlwmanifest.xml HTTP/2.0" 404 1064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Bad Web Bot
🇺🇸 octageeks.com	2026-05-01 04:09:04 (2 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 Smish	2026-05-01 03:51:56 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1777607514 log=2026-05-01T04:51:54+01:00 ip=159.223.80.6 host=44net.u ... show more HONEYPOT HIT --> Fail2ban time=1777607514 log=2026-05-01T04:51:54+01:00 ip=159.223.80.6 host=44net.uk method=GET uri="//xmlrpc.php?rsd" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ref="-" rid=bf03a9fa534aa72a2fa69f3a2772f32c show less	Web App Attack
🇺🇸 Dolphi	2026-05-01 03:00:04 (2 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-05-01 02:14:18 (2 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 todix	2026-05-01 01:41:20 (2 months ago)	Web App Attack Exploid from 159.223.80.6	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.200

🇺🇸 32.192.67.220

🇹🇼 198.235.24.124

🇬🇭 197.251.249.117

🇨🇷 186.177.88.55

🇱🇾 154.127.69.9

🇬🇧 51.195.149.120

🇨🇳 36.111.40.138

🇬🇧 35.203.211.10

🇺🇸 216.25.89.69

🇪🇨 191.99.55.248

🇺🇸 184.105.247.244

🇮🇳 144.48.48.73

🇺🇸 137.184.78.65

🇵🇰 103.166.103.173

🇺🇦 91.234.138.33

🇳🇱 86.54.31.40

🇺🇸 64.62.197.106

🇺🇸 34.48.238.201

🇺🇸 20.12.41.6