JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.85.156

159.223.85.156 was found in our database!

This IP was reported 355 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.85.156

Whois 159.223.85.156

IP Abuse Reports for 159.223.85.156:

This IP address has been reported a total of 355 times from 177 distinct sources. 159.223.85.156 was first reported on April 13th 2022, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-06-29 15:27:58 (22 hours ago)	Honeypot hit: HTTP/1.1 request on 1283 GET http://httpbin.org/get; 1283 [1] TCP	Hacking Bad Web Bot
🇧🇬 HighWay	2026-06-29 14:41:18 (23 hours ago)	[Mon Jun 29 13:38:08.646403 2026] [authz_core:error] [pid 1853091:tid 134975714223808] [client 159.2 ... show more [Mon Jun 29 13:38:08.646403 2026] [authz_core:error] [pid 1853091:tid 134975714223808] [client 159.223.85.156:33958] AH01630: client denied by server configuration: /var/www/html/ [Mon Jun 29 14:11:52.869034 2026] [authz_core:error] [pid 1853092:tid 134976162367168] [client 159.223.85.156:41070] AH01630: client denied by server configuration: /var/www/html/get [Mon Jun 29 14:18:28.770420 2026] [authz_core:error] [pid 1853091:tid 134975680652992] [client 159.223.85.156:53974] AH01630: client denied by server configuration: /var/www/html/get [Mon Jun 29 14:34:42.490457 2026] [authz_core:error] [pid 1853092:tid 134975873554112] [client 159.223.85.156:50376] AH01630: client denied by server configuration: /var/www/html/ [Mon Jun 29 14:41:16.632973 2026] [authz_core:error] [pid 1853091:tid 134975974266560] [client 159.223.85.156:47048] AH01630: client denied by server configuration: /var/www/html/ ... show less	Brute-Force
🇩🇪 Admins@FBN	2026-06-27 10:10:48 (3 days ago)	FW-PortScan: Traffic Blocked srcport=42117 dstport=8090	Port Scan
🇺🇸 donarev419	2026-06-27 10:10:25 (3 days ago)	Connection to port 8090 with data transfer. Data preview: CONNECT www.google.com:443 HTTP/1.1 Host: ... show more Connection to port 8090 with data transfer. Data preview: CONNECT www.google.com:443 HTTP/1.1 Host: www.google.com:443 User-Agent: Go-http-client/1.1 show less	Port Scan Hacking
🇺🇸 chillcog.com	2026-06-27 10:07:19 (3 days ago)	Blocked by on us-2-terraforge [8090/tcp] \| SPT: 52422 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by ... show more Blocked by on us-2-terraforge [8090/tcp] \| SPT: 52422 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: terraforge.fun show less	Port Scan
🇺🇸 MPL	2026-06-27 09:58:28 (3 days ago)	tcp/8090 (9 or more attempts)	Port Scan
🇩🇪 iNetWorker	2026-06-27 09:49:28 (3 days ago)	trying to access non-authorized port	Port Scan
🇺🇸 Bankbook8585	2026-06-27 09:47:37 (3 days ago)	T-Pot honeypot \| Honeytrap: port 8090	Port Scan Hacking
🇺🇸 MPL	2026-06-27 09:45:06 (3 days ago)	tcp/8090 (2 or more attempts)	Port Scan
🇩🇪 Da_tschek	2026-06-26 18:49:03 (3 days ago)	Port scanning	Port Scan Hacking
🇺🇸 xmission.com	2026-06-25 23:09:48 (4 days ago)	Blocked by UFW (TCP on 8081) Source port: 32794 TTL: 247 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 32794 TTL: 247 Packet length: 40 TOS: 0x00 This report (for 159.223.85.156) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ValtonTahiri	2026-06-25 23:08:56 (4 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.223.85.156; proto=TCP; source_port=34633; target_port=8081; flags=SYN show less	Port Scan
🇺🇸 sefinek.net	2026-06-25 23:08:15 (4 days ago)	Blocked by UFW on NY01 [8081/tcp] \| SPT: 43305 \| TTL: 242 \| LEN: 40 \| TOS: 0x08 • Reported by: githu ... show more Blocked by UFW on NY01 [8081/tcp] \| SPT: 43305 \| TTL: 242 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 SMi-Web	2026-06-25 22:48:11 (4 days ago)	Blocked by firewall on hugin [8081/tcp] \| Rule: AbuseIPDB \| SPT: 34795 \| TTL: 243 \| LEN: 40 \| TOS: 0 ... show more Blocked by firewall on hugin [8081/tcp] \| Rule: AbuseIPDB \| SPT: 34795 \| TTL: 243 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-25 22:46:05 (4 days ago)	Blocked by UFW (TCP on 8081) Source port: 40277 TTL: 247 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 40277 TTL: 247 Packet length: 40 TOS: 0x00 This report (for 159.223.85.156) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 355 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2001:1c00:3:400:cdfa:212a:de9c:d92f

🇧🇷 200.219.200.16

🇬🇧 165.227.234.27

🇺🇸 157.230.133.16

🇳🇱 91.92.243.207

🇩🇪 164.92.161.148

🇫🇮 147.185.133.49

🇭🇰 118.26.39.231

🇮🇳 103.132.243.250

🇷🇴 80.94.92.55

🇺🇸 65.182.74.176

🇨🇳 59.173.108.205

🇩🇪 51.89.24.175

🇬🇧 35.203.210.154

🇳🇱 195.178.110.155

🇩🇪 185.242.3.111

🇻🇳 157.10.45.70

🇸🇬 103.189.235.182

🇫🇷 51.178.251.89

🇭🇰 45.120.216.232