JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.204.192

159.223.204.192 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 44%: ?

44%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.204.192

Whois 159.223.204.192

IP Abuse Reports for 159.223.204.192:

This IP address has been reported a total of 22 times from 15 distinct sources. 159.223.204.192 was first reported on May 5th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-09-01 16:08:44 (1 week ago)	tcp/587 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-01 15:37:59 (1 week ago)	Blocked by UFW (TCP on 5003) Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5003) Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 159.223.204.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-09-01 15:14:51 (1 week ago)	tcp/445 (3 or more attempts)	Port Scan
🇳🇱 hxsain	2026-09-01 14:55:37 (1 week ago)	Blocked by UFW [8086/tcp] \| SPT: 61007 \| TTL: 236 \| LEN: 44 \| TOS: 0x08 • Reported by: github.com/se ... show more Blocked by UFW [8086/tcp] \| SPT: 61007 \| TTL: 236 \| LEN: 44 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-25 02:17:17 (2 weeks ago)	denied traffic to a non-approved destination port. destination port 4449.	Port Scan
🇺🇸 MPL	2026-08-25 01:37:57 (2 weeks ago)	tcp/8899 (2 or more attempts)	Port Scan
🇨🇦 1gz	2026-08-09 05:44:09 (1 month ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-08-09 02:34:06 (1 month ago)	159.223.204.192 - - [09/Aug/2026:02:34:05 +0000] "GET /wp-login.php HTTP/1.1" 302 645 "-" "Mozilla/5 ... show more 159.223.204.192 - - [09/Aug/2026:02:34:05 +0000] "GET /wp-login.php HTTP/1.1" 302 645 "-" "Mozilla/5.0" ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-09 02:15:24 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.tech \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-08-09 02:00:55 (1 month ago)	Scanning for web/db/file exploits on www.instrada.org	SQL Injection Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-04 09:36:15 (1 month ago)	Blocked by UFW (TCP on 8080) Source port: 61006 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 61006 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 159.223.204.192) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 donarev419	2026-07-31 01:35:33 (1 month ago)	Connection to port 8087 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144 Conn ... show more Connection to port 8087 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144 Connection: keep-alive sec-ch-ua: "Google Chrome";v="142", "N show less	Port Scan Hacking
🇫🇷 Petre 21_ip	2026-07-31 01:19:22 (1 month ago)	2026-07-31T03:19:21.295845+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-31T03:19:21.295845+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=159.223.204.192 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=58244 PROTO=TCP SPT=61012 DPT=22222 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-07-31 01:15:03 (1 month ago)	2026-07-31T04:15:02.505668+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-07-31T04:15:02.505668+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=159.223.204.192 DST=192.168.0.102 LEN=44 TOS=0x18 PREC=0x20 TTL=231 ID=59105 PROTO=TCP SPT=61006 DPT=44444 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-31 01:09:12 (1 month ago)	unsolicited connect TCP dport 8080 (sport 61012)	Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 2001:8f8:1b3b:2083:8bf8:8aa9:f8f7:e8bb

🇧🇷 189.85.92.210

🇷🇸 185.71.90.163

🇺🇸 173.239.240.86

🇺🇸 104.131.55.126

🇺🇸 47.88.89.31

🇧🇷 187.28.1.110

🇭🇰 101.32.51.96

🇺🇸 100.28.44.58

🇺🇸 2607:f8b0:4001:c61::122

🇳🇱 173.194.170.112

🇺🇸 157.254.109.196

🇨🇳 124.114.150.86

🇻🇳 103.232.121.18

🇸🇪 95.209.141.149

🇹🇷 95.15.142.146

🇬🇧 86.24.100.108

🇧🇬 79.124.60.218

🇮🇶 62.201.212.54

🇺🇸 43.166.174.26