43.134.75.111
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Tencent Building, Kejizhongyi Avenue
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS132203
- Domain Name
- tencent.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
47 from
40 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Alt255 |
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 43.134.75.111 - - \[24/Oct/2026:05:07:48 +0200\] "GET /.env HTTP/1.1" 403 618 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 pscriptos |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| 🇩🇪 mzaiser12 |
Web application probing: 16 requests to typical attack paths (/.env.backup, /.env.bak, /.env.config, /.env) within 5 min. Reported automatically by a SIEM; contact via abuse mailbox of the reporting network.
|
Bad Web Bot Web App Attack | |
| 🇳🇱 Alt255 |
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 43.134.75.111 - - [24/Oct/2026:05:07:48 +0200] "GET /.env HTTP/1.1" 403 618 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
|
Hacking | |
| 🇳🇱 SysAdmin Dylan |
(mod_security) mod_security (id:210492) triggered by 43.134.75.111 (SG/Singapore/-): 10 in the last 3600 secs
|
Brute-Force | |
| 🇳🇱 Alt255 |
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 43.134.75.111 - - \[24/Oct/2026:05:07:48 +0200\] "GET /.env HTTP/1.1" 403 618 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-24 UTC.
|
Brute-Force Exploited Host | |
| 🇺🇸 JL41414141 |
43.134.75.111 - - [23/Oct/2026:22:16:16 +0000] "GET /.passwd-s3fs HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
43.134.75.111 - - [23/Oct/2026:22:16:17 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Go-http-client/1.1"
...
|
Web Spam | |
| 🇺🇸 PlexLads |
147.182.234.53:443 43.134.75.111 - - [23/Oct/2026:12:59:50 -0700] "GET /.passwd-s3fs HTTP/1.1" 403 1856 "-" "Go-http-client/1.1" 147.182.234.53:443 43.134.75.111 - - [23/Oct/2026:12:59:52 -0700] "GET /.env HTTP/1.1" 403 366 "-" "Go-http-client/1.1"
|
Hacking Web App Attack | |
| 🇺🇸 chronos |
|
Hacking Web App Attack | |
| 🇺🇸 chronos |
[AUTORAVALT][[23/10/2026 - 13:06:48 -03:00 UTC]
Attack from [43.134.75.111] Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing.
]
...
|
Bad Web Bot | |
| 🇬🇧 dwmosaics |
"GET /.env.backup HTTP/1.1" 404 503 "-" "Go-http-client/1.1"
|
Brute-Force Bad Web Bot | |
| 🇺🇸 swalluw |
Web vulnerability scanning: request for /.env (HTTP 404, GET) at 2026-10-23T09:48:09+00:00 - exploit probe, no legitimate use
|
Bad Web Bot Web App Attack | |
| 🇵🇱 nfsec.pl |
|
Web App Attack Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown