JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.134.16.85

43.134.16.85 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 59%: ?

59%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.134.16.85

Whois 43.134.16.85

IP Abuse Reports for 43.134.16.85:

This IP address has been reported a total of 22 times from 9 distinct sources. 43.134.16.85 was first reported on June 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-10 11:42:04 (1 day ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 xxkodedxx	2026-06-10 10:46:48 (1 day ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: SG / AS132203 Shenzhen Tencent Computer Systems Company Limited Active: 10:46:24 UTC Volume: 1 HTTP req Probed: / Status mix: 400×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
Anonymous	2026-06-10 06:33:22 (1 day ago)	Illegitimate and/or suspicious requests.	Hacking
🇨🇭 blinx	2026-06-10 05:36:11 (1 day ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇪🇸 librebit	2026-06-10 03:28:32 (1 day ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-10 01:58:56 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:58:49.107342 2026] [security2:error] [pid 25508:tid 25508] [client 43.134.16.85:57184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.hierarchyofvalues.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hierarchyofvalues.org"] [uri "/"] [unique_id "aijE2aWqBxXLHnUbi8VKTQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-10 01:08:32 (1 day ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-10 00:50:34 (1 day ago)	(mod_security-custom) mod_security (id:210350) triggered by 43.134.16.85 (SG/Singapore/-/Singapore/- ... show more (mod_security-custom) mod_security (id:210350) triggered by 43.134.16.85 (SG/Singapore/-/Singapore/-/[AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-09 20:14:18 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:14:10.082430 2026] [security2:error] [pid 18458:tid 18458] [client 43.134.16.85:57768] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|worldchat.global\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "worldchat.global"] [uri "/"] [unique_id "aih0EuqItrfIPz0KtRFHFwAAABM"], referer: http://worldchat.global show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 19:35:44 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:35:39.565020 2026] [security2:error] [pid 7738:tid 7738] [client 43.134.16.85:56618] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.ati.software\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ati.software"] [uri "/"] [unique_id "aihrCwPC5RppcL_Ga7h5xgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 18:24:53 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:24:45.767183 2026] [security2:error] [pid 26647:tid 26647] [client 43.134.16.85:57124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|switkoprofiri.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "switkoprofiri.org"] [uri "/"] [unique_id "aihabZpUwELB2Wll_INzWQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 16:49:52 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:49:47.714658 2026] [security2:error] [pid 5096:tid 5096] [client 43.134.16.85:44808] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.darrow.biz\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.darrow.biz"] [uri "/"] [unique_id "aihEK7-lzl9C9YTU_4V_5gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-09 16:18:17 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 15:59:03 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:58:57.577271 2026] [security2:error] [pid 14298:tid 14298] [client 43.134.16.85:44734] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kln.ne.jp\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kln.ne.jp"] [uri "/"] [unique_id "aig4Qbd9M5M1k1rNtHQ9SwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 15:28:36 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 43.134.16.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:28:31.699234 2026] [security2:error] [pid 25424:tid 25424] [client 43.134.16.85:32860] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dunbartonucc.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dunbartonucc.org"] [uri "/"] [unique_id "aigxH320JhQe_Lzj9nfKNwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.163

🇺🇸 107.150.99.9

🇩🇪 77.90.43.8

🇳🇱 64.89.162.55

🇧🇷 45.205.1.76

🇺🇸 24.97.253.246

🇺🇸 20.169.81.90

🇷🇴 2.57.121.25

🇭🇰 220.246.46.144

🇩🇪 213.209.159.56

🇮🇳 182.18.139.237

🇨🇳 171.120.24.132

🇳🇱 160.119.71.12

🇨🇦 85.217.149.10

🇷🇴 80.94.92.177

🇺🇸 66.132.186.185

🇱🇺 46.151.182.58

🇪🇬 41.33.91.226

🇺🇸 20.169.81.226

🇺🇸 20.169.78.206