JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.156.96.16

43.156.96.16 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 89%: ?

89%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.156.96.16

Whois 43.156.96.16

IP Abuse Reports for 43.156.96.16:

This IP address has been reported a total of 20 times from 20 distinct sources. 43.156.96.16 was first reported on June 18th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 PrivateLiu	2026-06-25 20:49:02 (18 hours ago)	[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.env, /s3cmd.ini, /.s3cfg, /.passwd-s3fs. Statuses: 404, 444. Methods: GET. UA: Go-http-client/2.0 show less	Bad Web Bot Web App Attack
🇨🇦 alexbfr	2026-06-25 08:59:57 (1 day ago)	Fail2Ban Report, nginx-bot-trap jail: Automated honeypot detection.	Port Scan
🇺🇸 wteiken	2026-06-24 18:49:54 (1 day ago)	www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:44 -0400] "GET /s3cmd.ini HTTP/1.1" 404 ... show more www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:44 -0400] "GET /s3cmd.ini HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:46 -0400] "GET /.env HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:47 -0400] "GET /.env.backup HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:48 -0400] "GET /.env.bak HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:50 -0400] "GET /.env.config HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:51 -0400] "GET /.env.dev HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:52 -0400] "GET /.env.live HTTP/1.1" 404 498 "-" "Go-http-client/1.1" www.teiken.net:443 43.156.96.16:45772 - - [24/Jun/2026:14:49:54 -0400] "GET /.env.local HTTP/ ... show less	Web App Attack
🇺🇸 [email protected]	2026-06-24 13:14:00 (2 days ago)	[Tue Jun 23 23:05:21.343754 2026] [authz_core:error] [pid 5289] [client 43.156.96.16:41228] AH01630: ... show more [Tue Jun 23 23:05:21.343754 2026] [authz_core:error] [pid 5289] [client 43.156.96.16:41228] AH01630: client denied by server configuration: /opt/homebrew/var/www/.github [Tue Jun 23 23:05:22.984806 2026] [authz_core:error] [pid 5289] [client 43.156.96.16:41228] AH01630: client denied by server configuration: /opt/homebrew/var/www/.github [Tue Jun 23 23:05:24.611319 2026] [authz_core:error] [pid 5289] [client 43.156.96.16:41228] AH01630: client denied by server configuration: /opt/homebrew/var/www/.github [Tue Jun 23 23:05:58.591354 2026] [php:error] [pid 5289] [client 43.156.96.16:41228] script '/opt/homebrew/var/www/phpinfo.php' not found or unable to stat [Tue Jun 23 23:06:00.304897 2026] [php:error] [pid 5289] [client 43.156.96.16:41228] script '/opt/homebrew/var/www/info.php' not found or unable to stat [Tue Jun 23 23:06:02.084920 2026] [php:error] [pid 5289] [client 43.156.96.16:41228] script '/opt/homebrew/var/www/pinfo.php' not found or unable to stat show less	Web App Attack Hacking
Anonymous	2026-06-24 11:01:02 (2 days ago)	...	Web App Attack
🇺🇸 chrisj	2026-06-24 09:11:24 (2 days ago)	[Wed Jun 24 09:11:20.259649 2026] [proxy_fcgi:error] [pid 298292:tid 298321] [remote 43.156.96.16:40 ... show more [Wed Jun 24 09:11:20.259649 2026] [proxy_fcgi:error] [pid 298292:tid 298321] [remote 43.156.96.16:40890] AH01071: Got error 'Primary script unknown' [Wed Jun 24 09:11:22.166514 2026] [proxy_fcgi:error] [pid 298292:tid 298322] [remote 43.156.96.16:40890] AH01071: Got error 'Primary script unknown' [Wed Jun 24 09:11:24.079574 2026] [proxy_fcgi:error] [pid 298292:tid 298323] [remote 43.156.96.16:40890] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 xxkodedxx	2026-06-24 06:17:33 (2 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 8× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 8× edge-block in 10m window. Origin: SG / AS- - Active: 06:16:45→06:16:51 UTC Volume: 8 HTTP req Probed: /.s3cfg Status mix: 444×8 Vhost fishing: 67.217.240.72 UA: "Go-http-client/2.0" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇺🇸 nasset	2026-06-23 05:52:20 (3 days ago)	43.156.96.16 - - [22/Jun/2026:22:52:13 -0700] "GET /core/.env HTTP/1.1" 403 584 "-" "Go-http-client/ ... show more 43.156.96.16 - - [22/Jun/2026:22:52:13 -0700] "GET /core/.env HTTP/1.1" 403 584 "-" "Go-http-client/1.1" 43.156.96.16 - - [22/Jun/2026:22:52:14 -0700] "GET /config/.env HTTP/1.1" 403 584 "-" "Go-http-client/1.1" 43.156.96.16 - - [22/Jun/2026:22:52:16 -0700] "GET /wp-config.php.bak HTTP/1.1" 403 584 "-" "Go-http-client/1.1" 43.156.96.16 - - [22/Jun/2026:22:52:17 -0700] "GET /docker-compose.yml HTTP/1.1" 403 584 "-" "Go-http-client/1.1" 43.156.96.16 - - [22/Jun/2026:22:52:19 -0700] "GET /.github/workflows/build.yaml HTTP/1.1" 403 584 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-22 08:13:22 (4 days ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 Baking333	2026-06-22 05:28:05 (4 days ago)	[redacted] 43.156.96.16 - - [22/Jun/2026:06:28:02 +0100] "GET /.env HTTP/2.0" 307 64 "-" "Go-http-cl ... show more [redacted] 43.156.96.16 - - [22/Jun/2026:06:28:02 +0100] "GET /.env HTTP/2.0" 307 64 "-" "Go-http-client/2.0" [redacted] 43.156.96.16 - - [22/Jun/2026:06:28:03 +0100] "GET /.[redacted] HTTP/2.0" 307 64 "-" "Go-http-client/2.0" show less	Bad Web Bot Web App Attack
🇦🇺 user-01	2026-06-21 23:58:38 (4 days ago)	Multiple WAF violations	Web App Attack
🇺🇸 gamabe	2026-06-21 09:23:57 (5 days ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇮🇩 penjaga BRIN	2026-06-21 02:58:05 (5 days ago)	Suspicious malicious activity	Hacking
🇺🇸 cwytech	2026-06-20 20:35:58 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/rdg-zero-trust-high.	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-20 16:33:41 (5 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.94

🇫🇮 178.20.210.208

🇪🇬 156.223.27.234

🇺🇸 147.185.132.83

🇫🇷 85.217.140.13

🇸🇪 4.225.202.230

🇺🇿 213.230.65.53

🇺🇸 172.216.11.8

🇺🇸 136.66.81.166

🇳🇱 45.148.10.152

🇩🇰 2a03:5440:1:4902:9999::243

🇧🇷 201.76.5.133

🇳🇱 195.178.110.232

🇬🇧 109.228.59.224

🇩🇪 92.208.35.182

🇨🇦 85.217.149.12

🇷🇴 80.94.92.55

🇺🇸 66.132.186.246

🇬🇧 35.203.211.178

🇺🇸 4.157.250.195