JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.223.38.45

159.223.38.45 was found in our database!

This IP was reported 396 times. Confidence of Abuse is 45%: ?

45%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.223.38.45

Whois 159.223.38.45

IP Abuse Reports for 159.223.38.45:

This IP address has been reported a total of 396 times from 87 distinct sources. 159.223.38.45 was first reported on February 14th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-20 13:20:30 (2 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Roper123	2026-06-20 12:49:59 (2 hours ago)	Web app exploits	Web App Attack
🇲🇾 Rizzy	2026-06-16 16:38:36 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇹🇷 Threat.live	2026-06-06 23:15:02 (1 week ago)	Threat.live: Web Scan	Web App Attack
🇵🇱 Roper123	2026-06-06 17:52:42 (1 week ago)	Web app exploits	Web App Attack
🇺🇸 itsnixk	2026-06-06 10:32:42 (2 weeks ago)	(mod_security) mod_security (id:920350) triggered by 159.223.38.45 (SG/Singapore/-): 1 in the last 3 ... show more (mod_security) mod_security (id:920350) triggered by 159.223.38.45 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 06 06:32:39.084529 2026] [security2:error] [pid 2345204:tid 2345288] [client 159.223.38.45:55660] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "aiP3RxYpxERwMbPozI_SwQAAAAE"] show less	Port Scan
🇩🇪 nidaren	2026-05-25 22:07:23 (3 weeks ago)	159.223.38.45 - - [26/May/2026:00:07:22 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD3>\x9 ... show more 159.223.38.45 - - [26/May/2026:00:07:22 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD3>\x98\xA3_`\xB5\xF2A-\x03g\x82\x9E \xCB\x87+\x0B\x22\xD0L\xA7\x12zj" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-19 00:53:51 (1 month ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-18 18:49: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-18 18:49:08 /favicon.ico 2026-05-18 22:45:59 /favicon.ico 2026-05-18 23:36:04 /favicon.ico 2026-05-18 23:36:03 /mail/costum/images/favicon.ico show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-18 01:24:29 (1 month ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-05-14 00:51:20 (1 month ago)	159.223.38.45 - - [14/May/2026:02:51:19 +0200] "GET / HTTP/1.1" 301 169 "-" "Go-http-client/1.1"	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-12 01:24:51 (1 month ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-11 01:45: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-11 01:45:28 /favicon.ico 2026-05-11 07:52:04 /favicon.ico 2026-05-11 07:52:28 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-10 01:35:51 (1 month ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-09 01:21: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-09 01:21:26 /favicon.ico 2026-05-09 10:18:41 /favicon.ico 2026-05-09 05:01:50 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-06 03:36:33 (1 month ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-05 08:56: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.223.38.45 2026-05-05 08:56:24 /favicon.ico 2026-05-05 12:32:34 /favicon.ico 2026-05-05 11:29:23 /favicon.ico 2026-05-05 16:11:28 /favicon.ico show less	Web App Attack
🇹🇭 MWA SOC	2026-05-04 06:41:32 (1 month ago)		Hacking
🇩🇪 ghostwarriors	2026-05-03 18:50:37 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 396 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.149.53.243

🇭🇰 199.45.154.190

🇳🇬 102.88.137.213

🇺🇸 100.49.117.77

🇷🇺 94.180.250.11

🇸🇪 9.223.176.221

🇺🇸 216.25.89.152

🇸🇬 172.188.89.41

🇩🇪 95.90.13.168

🇳🇱 89.190.156.12

🇳🇱 45.148.10.141

🇺🇸 34.24.142.222

🇮🇳 2405:201:8007:5012:7c19:68dc:cd1a:2005

🇩🇪 194.88.98.125

🇳🇱 158.173.3.222

🇺🇸 107.155.48.46

🇨🇴 2800:484:3e80:d020:459c:5feb:b279:565a

🇨🇳 222.92.62.211

🇨🇳 221.200.215.156

🇰🇷 211.106.137.135