JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.138.8.44

159.138.8.44 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 0%: ?

ISP	Huawei HongKong Clouds
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Hostname(s)	ecs-159-138-8-44.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.138.8.44

Whois 159.138.8.44

IP Abuse Reports for 159.138.8.44:

This IP address has been reported a total of 64 times from 21 distinct sources. 159.138.8.44 was first reported on April 10th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 finnjohan	2025-08-27 19:59:36 (10 months ago)	Suspicious access from Hong Kong detected in Apache logs	DDoS Attack
Anonymous	2025-08-24 16:06:47 (10 months ago)	[17:06:45] 4b: Exploit attempt against non-existent file - /ip	Hacking Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2025-08-23 13:36:20 (10 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 lnklnx	2025-08-23 00:15:29 (10 months ago)	man-cave.lnklnx.com:443 159.138.8.44 - - [22/Aug/2025:19:15:26 -0500] "GET /documents/prudent-FileCh ... show more man-cave.lnklnx.com:443 159.138.8.44 - - [22/Aug/2025:19:15:26 -0500] "GET /documents/prudent-FileChooser/od/selfrequestsendallresponse/measure-CONNECT/eighteenB/testability/crosscorridor/againbut-URLDecoder/soooA/ineffably/gusty/rigged/murderbot-hastiest/democracies/Hair/pecan/nonhuman/splitting/flimsy/ HTTP/1.1" 503 3194 "https://man-cave.lnklnx.com/documents/prudent-FileChooser/od/selfrequestsendallresponse/measure-CONNECT/eighteenB/testability/crosscorridor/againbut-URLDecoder/soooA/ineffably/gusty/rigged/murderbot-hastiest/democracies/Hair/pecan/nonhuman/splitting/flimsy/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 conseilgouz	2025-08-22 04:13:47 (10 months ago)	sae-22 : 8G : REQUEST_URI error=>/culture-et-loisirs/agenda-du-village/search.form/2019/06/22/73\|75	Hacking
Anonymous	2025-08-21 05:14:09 (10 months ago)	Malicious activity detected	Hacking Brute-Force
🇮🇩 hermawan	2025-08-20 18:56:49 (10 months ago)	[Thu Aug 21 01:55:22.892466 2025] [security2:error] [pid 117679:tid 140122989237952] [client 159.138 ... show more [Thu Aug 21 01:55:22.892466 2025] [security2:error] [pid 117679:tid 140122989237952] [client 159.138.8.44:38882] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 159.138.8.44 request_line = GET /ip HTTP/1.1 Request URI RAW = /ip Request Basename = ip"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ip"] [unique_id "aKYaGromEt9kBp3zRUXiPAAAAxM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[117725] [HoLSg1D1uk8] [aKYaGromEt9kBp3zRUXiPAAAAxM] keep_alive=[0] [2025-08-21 01:55:22.892471] [R:aKYaGromEt9kBp3zRUXiPAAAAxM] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0. ... show less	Hacking Web App Attack
🇫🇷 bigorre.org	2025-08-20 16:26:14 (10 months ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇫🇷 Sklurk	2025-08-20 08:30:51 (10 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-08-16 05:17:43 (10 months ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2025-08-16 04:47:15 (10 months ago)	[Sat Aug 16 11:39:47.741274 2025] [security2:error] [pid 447152:tid 140286785222336] [client 159.138 ... show more [Sat Aug 16 11:39:47.741274 2025] [security2:error] [pid 447152:tid 140286785222336] [client 159.138.8.44:39248] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 159.138.8.44 request_line = GET /ip HTTP/1.1 Request URI RAW = /ip Request Basename = ip"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ip"] [unique_id "aKALk5LAntldnAY5exN_pwAAAAY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[447237] [tr2kGDSfXUs] [aKALk5LAntldnAY5exN_pwAAAAY] keep_alive=[0] [2025-08-16 11:39:47.741279] [R:aKALk5LAntldnAY5exN_pwAAAAY] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0. ... show less	Hacking Web App Attack
Anonymous	2025-08-15 19:54:26 (10 months ago)	Malicious activity	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2025-08-14 08:01:54 (11 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-08-13 04:02:18 (11 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-08-07 10:24:13 (11 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇱🇻 151.242.43.229

🇮🇹 93.63.237.36

🇫🇷 51.75.142.38

🇳🇱 45.148.10.62

🇨🇳 183.236.75.189

🇸🇬 172.253.236.209

🇺🇸 172.184.211.112

🇨🇳 113.231.15.139

🇨🇳 113.214.37.18

🇷🇺 77.66.192.139

🇩🇪 31.70.111.242

🇭🇰 116.48.151.136

🇺🇸 104.232.79.58

🇭🇰 43.155.40.91

🇺🇸 23.129.64.183

🇺🇸 13.217.145.93

🇮🇳 103.84.129.104

🇭🇰 43.132.150.89

🇺🇸 34.227.156.153