JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.129.192.160

43.129.192.160 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 43%: ?

43%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.129.192.160

Whois 43.129.192.160

IP Abuse Reports for 43.129.192.160:

This IP address has been reported a total of 17 times from 16 distinct sources. 43.129.192.160 was first reported on June 24th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-10-13 04:05:34 (4 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 Budyn	2026-10-12 08:05:28 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.goblinpot.website \| URI: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-10-11 16:36:19 (5 days ago)	HTTP application-layer DoS / botnet traffic from 43.129.192.160: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 43.129.192.160: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇷🇺 Mga Admin	2026-09-28 09:24:57 (2 weeks ago)	43.129.192.160 - - [28/Sep/2026:16:24:56 +0700] "GET /help/user/project/pages/custom_domains_ssl_tls ... show more 43.129.192.160 - - [28/Sep/2026:16:24:56 +0700] "GET /help/user/project/pages/custom_domains_ssl_tls_certification/ HTTP/1.1" 404 1498 "https://gitlab.mga.icgbio.ru/help/user/project/pages/custom_domains_ssl_tls_certification/#force-https-for-gitlab-pages-websites" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-23 08:13:06 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 43.129.192.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 43.129.192.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 04:13:00.259591 2026] [security2:error] [pid 23045:tid 23045] [client 43.129.192.160:48426] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ozkanturker.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ozkanturker.com"] [uri "/makaleler/tezgah/_vti_cnf/Thumbs.db"] [unique_id "arOKDPnie1AIQj1UCmHyZwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-09-21 07:36:57 (3 weeks ago)	requested HTTP honeypot page - ignored robots.txt - bad crawler ...	Bad Web Bot Exploited Host
Anonymous	2026-09-20 04:53:01 (3 weeks ago)	WEB attack	Brute-Force
Anonymous	2026-09-16 15:50:18 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 LRob	2026-09-01 15:14:29 (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /fr/64-decorations-murales \| query: order=product.position.asc&page=5 \| 2026-09-01 15:14 UTC show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-08-29 10:55:25 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de17848Geral/ChangeCulture) show less	Hacking Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-08-04 08:05:02 (2 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇪 KIDOS	2026-07-28 02:22:50 (2 months ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇨🇭 backslash	2026-07-23 11:03:06 (2 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
Anonymous	2026-07-12 19:50:51 (3 months ago)	PAD: Bot_Add_Cart detected	Bad Web Bot
🇫🇷 bigorre.org	2026-06-30 14:42:47 (3 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.253

🇧🇷 177.9.158.186

🇺🇸 157.245.241.96

🇵🇰 139.135.60.91

🇹🇭 118.194.251.197

🇵🇰 103.66.149.153

🇳🇱 89.21.67.168

🇬🇧 81.19.219.213

🇺🇸 74.82.47.5

🇺🇸 52.188.192.39

🇬🇧 35.203.211.241

🇬🇧 35.203.211.180

🇬🇧 35.203.210.172

🇺🇸 34.46.199.48

🇺🇸 23.227.147.163

🇮🇳 20.219.91.90

🇬🇧 5.226.140.5

🇦🇷 181.191.143.243

🇺🇸 180.181.122.134

🇺🇸 172.180.64.72