159.223.197.155

Classification: Malicious

159.223.197.155 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-14. Network: AS14061 Digitalocean, LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Bruteforce login attacker Blocklist.de 2022-12-13 01:49:01 2026-08-14 09:01:09 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-13 07:00:59 2026-08-14 07:01:01 attacker malicious-activity
VPN IPWhois.io 2026-07-18 22:44:18 2026-07-18 22:44:18 anonymization vpn
Malicious Host AbuseIPDB 2026-05-16 21:42:07 2026-05-26 12:09:46 malicious-activity
Proxy IPWhois.io 2026-05-18 13:10:57 2026-05-18 13:10:57 anonymization
Bruteforce AbuseIPDB 2026-04-30 17:13:23 2026-05-18 13:02:00 malicious-activity
SSH Attacker AbuseIPDB 2026-04-30 17:13:23 2026-05-18 13:02:00 malicious-activity
HTTP Attacker AbuseIPDB 2026-05-16 06:19:47 2026-05-18 11:15:35 malicious-activity
SSH Attacker Blocklist.de 2022-12-18 02:21:10 2026-05-18 10:00:36 malicious-activity
Port Scanner AbuseIPDB 2026-05-12 21:18:04 2026-05-18 07:09:06 anomalous-activity
Malicious Host HoneyDB 2022-12-18 00:00:00 2026-05-18 00:00:00 malicious-activity
Hacking AbuseIPDB 2026-05-14 06:00:01 2026-05-16 06:00:02 malicious-activity
Suspicious Host AbuseIPDB 2026-05-01 11:00:10 2026-05-13 17:07:18 anomalous-activity
Proxy FireHOL 2023-01-04 07:44:53 2025-10-06 16:24:41 anonymization
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP Emerging Threats 2022-12-28 21:09:19 2023-02-12 08:44:07 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP Emerging Threats 2022-12-28 21:09:16 2023-02-12 08:44:04 malicious-activity
Bruteforce Maltiverse 2022-12-08 09:21:32 2022-12-28 02:18:43 malicious-activity
SSH Attacker Maltiverse 2022-12-08 09:21:32 2022-12-28 02:18:43 malicious-activity
Hacking Maltiverse 2022-12-08 09:53:01 2022-12-28 01:10:40 malicious-activity
Port Scanner Maltiverse 2022-12-08 09:22:10 2022-12-28 01:10:40 anomalous-activity
DDoS attack Maltiverse 2022-12-14 13:24:40 2022-12-20 04:18:44 malicious-activity
Malicious Host Maltiverse 2022-12-16 00:22:26 2022-12-20 00:23:06 compromised malicious-activity
Phishing Maltiverse 2022-12-14 13:24:40 2022-12-18 17:09:47 malicious-activity
Mail Spammer Maltiverse 2022-12-14 13:24:40 2022-12-18 17:09:47 malicious-activity
IMAP Attacker Maltiverse 2022-12-14 13:24:40 2022-12-18 17:09:47 malicious-activity
FTP Attacker Maltiverse 2022-12-08 16:40:50 2022-12-18 17:09:47 malicious-activity
HTTP Attacker Maltiverse 2022-12-10 00:37:04 2022-12-18 09:08:32 malicious-activity
HTTP Scrapper Maltiverse 2022-12-14 13:27:34 2022-12-15 20:31:18 anomalous-activity
SQL Injection Maltiverse 2022-12-14 13:27:34 2022-12-14 13:27:34 malicious-activity
IoT Attacker Maltiverse 2022-12-14 13:27:34 2022-12-14 13:27:34 malicious-activity

Tags

anonymization ssh bruteforce bot attacker login joomla wordpress apache ddos rfi

Whois information

AS name
AS14061 Digitalocean, LLC
AS registry
arin
AS date
2020-11-03 00:00:00
AS CIDR
159.223.192.0/20
CIDR
159.223.0.0/16
Registrant
Digitalocean, LLC
Address
101 Ave of the Americas FL2
City
San Jose
State
CA
Postal code
95113
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2022-12-13 01:49:01
Last updated
2026-08-14 09:01:09

Malicious IPs in the same CIDR

159.223.192.73 159.223.204.41 159.223.197.17 159.223.207.140 159.223.194.207 159.223.207.29 159.223.203.97 159.223.196.110 159.223.197.82 159.223.196.104 159.223.195.105 159.223.194.146 159.223.200.56 159.223.195.244 159.223.202.243 159.223.204.14 159.223.192.197 159.223.194.197 159.223.197.45 159.223.192.82 159.223.197.155 159.223.200.181 159.223.193.118 159.223.205.190 159.223.194.38