JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.138.84.154

159.138.84.154 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 49%: ?

49%

ISP	Huawei Singapore Clouds
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Hostname(s)	ecs-159-138-84-154.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.138.84.154

Whois 159.138.84.154

IP Abuse Reports for 159.138.84.154:

This IP address has been reported a total of 14 times from 9 distinct sources. 159.138.84.154 was first reported on August 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SX Communications	2026-08-24 21:30:41 (1 day ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 jkhorvath.com	2026-08-24 17:05:22 (2 days ago)	Request for URL /ip	Phishing Brute-Force Web App Attack
🇺🇸 SX Communications	2026-08-23 12:59:08 (3 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-23 04:02:18 (3 days ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-08-22 21:07:08 (3 days ago)	Automated web scanner. Requested suspicious paths: /ip. UTC: 2026-08-22 21:06:25.	Web App Attack
🇺🇸 SX Communications	2026-08-21 06:15:58 (5 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-19 21:57:03 (6 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇦🇺 afleventoffice.com.au	2026-08-19 06:19:28 (1 week ago)	GET /ip HTTP/1.1	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-18 15:25:00 (1 week ago)	winesbydesign.com.au:443 159.138.84.154 - - [19/Aug/2026:01:24:57 +1000] "GET /ip HTTP/1.1" 404 2225 ... show more winesbydesign.com.au:443 159.138.84.154 - - [19/Aug/2026:01:24:57 +1000] "GET /ip HTTP/1.1" 404 222522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-08-14 22:29:25 (1 week ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-08-13 22:19:32 (1 week ago)	Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled produc ... show more Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled product pages without loading any page assets (CSS/JS/images) - consistent with headless scripted access rather than a real browser session. show less	Bad Web Bot Web App Attack
Anonymous	2026-08-13 07:21:16 (1 week ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 klaus_ph	2026-08-12 05:04:18 (2 weeks ago)	159.138.84.154 - - [12/Aug/2026:00:21:51 +0200] "GET /lis/Search/Results?filter%5B0%5D=format%3A%22B ... show more 159.138.84.154 - - [12/Aug/2026:00:21:51 +0200] "GET /lis/Search/Results?filter%5B0%5D=format%3A%22Book%22&type=AllFields&lng=uk HTTP/1.1" 200 21635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-08 17:27:15 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 159.138.84.154: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 180.183.69.95

🇱🇹 213.176.26.153

🇱🇹 213.176.26.94

🇰🇷 211.240.117.75

🇰🇷 211.46.202.61

🇩🇪 207.154.247.140

🇺🇸 144.172.99.12

🇫🇷 85.217.140.15

🇮🇳 49.206.27.37

🇫🇷 45.80.9.225

🇫🇷 172.71.134.164

🇩🇪 167.94.145.28

🇺🇸 165.154.202.189

🇻🇳 58.186.20.143

🇨🇳 14.116.146.156

🇱🇹 213.176.26.175

🇳🇱 195.178.110.30

🇺🇸 192.243.104.23

🇨🇳 120.203.161.202

🇨🇳 116.179.37.38