JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

43.157.50.163

Recent Activity

Abuse Confidence Score

74% Elevated

57 reports

26 reporters · latest 9 hours ago

ISP: Asia Pacific Network Information Center, Pty. Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS132203
Domain Name: apnic.net
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

57 from 26 distinct reporters

First reported

August 12th 2025

Most recent report

9 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 5 🇫🇮 Finland 2 🇵🇱 Poland 2

Most common categories Web App Attack 12 Bad Web Bot 9 Brute-Force 7 SSH 1 SQL Injection 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-11-06 21:51:20 UTC · (9 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇵🇱 mscode.pl	2026-11-06 20:31:02 UTC · (10 hours ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 132203 (Tencent Building, Kejizhongyi Avenue) Protocol: HTTP/1.1 (GET method) Zone: pma1.mscode.pl Endpoint: /cpanel/phpinfo.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 132203 (Tencent Building, Kejizhongyi Avenue) Protocol: HTTP/1.1 (GET method) Zone: pma1.mscode.pl Endpoint: /cpanel/phpinfo.php UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-11-06 19:55:51 UTC · (11 hours ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 Savvii	2026-11-06 18:48:31 UTC · (12 hours ago)	20 attempts against mh-misbehave-ban on pyrus	Brute-Force Bad Web Bot Web App Attack
🇫🇮 mnazibo	2026-11-06 07:30:17 UTC · (23 hours ago)	Date: Nov 06 09:38:27 2026 EAT \| Reported IP: 43.157.50.163 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 920440 930130 920500 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| ... show more Date: Nov 06 09:38:27 2026 EAT \| Reported IP: 43.157.50.163 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 920440 930130 920500 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Direct Unix Command Execution; Remote Command Execution: Direct Unix Command Execution; PHP Injection Attack: Variable Access Found; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Pro show less	SQL Injection Brute-Force Bad Web Bot
🇸🇪 vaia.cloud	2026-11-06 06:35:01 UTC · (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇵🇱 Budyn	2026-11-06 06:32:10 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: prometheus.astropot.online \| Path: /.git/config \| User-Agent: Mozilla/5.0 (X11; Linux x86_64 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: prometheus.astropot.online \| Path: /.git/config \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇮 KTSTechnology	2026-11-06 04:21:26 UTC · (1 day ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-05 23:00:59 UTC · (1 day ago)	Auto-ban: >3000 req/min op 2026-11-05	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-11-05 19:06:25 UTC · (1 day ago)	[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.157.50.163 - - [05/Nov/2026:20:06:18 +0100] "GET /.git/config HTTP/2.0" 404 61924 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ... show more [cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.157.50.163 - - [05/Nov/2026:20:06:18 +0100] "GET /.git/config HTTP/2.0" 404 61924 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-11-05 17:39:07 UTC · (1 day ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 13:59:12 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 43.157.50.163 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 08:59:04.161047 2026] [security2:error] [pid 11868:tid 11868] [client 43.157.50.163:44530] M ... show more (mod_security) mod_security (id:210492) triggered by 43.157.50.163 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 08:59:04.161047 2026] [security2:error] [pid 11868:tid 11868] [client 43.157.50.163:44530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theholographicseed.com"] [uri "/.git/config"] [unique_id "auyLqLemYT6B1ZShyecr6wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-11-05 13:06:29 UTC · (1 day ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 12:01:37 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 43.157.50.163 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 07:01:30.937835 2026] [security2:error] [pid 15363:tid 15363] [client 43.157.50.163:46786] M ... show more (mod_security) mod_security (id:210492) triggered by 43.157.50.163 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 07:01:30.937835 2026] [security2:error] [pid 15363:tid 15363] [client 43.157.50.163:46786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegrandcouncil.com"] [uri "/.git/config"] [unique_id "auxwGhNyeFOGR32SEG7WEAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2025-09-21 15:19:49 UTC · (1 year ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.49

🇨🇴 8.243.73.199

🇸🇪 185.198.10.24

🇻🇳 123.16.148.168

🇮🇳 116.74.91.50

🇵🇰 110.38.10.242

🇲🇦 105.158.44.43

🇵🇱 95.135.121.49

🇵🇱 95.134.188.80

🇵🇱 95.134.10.6

🇩🇪 85.155.15.14

🇺🇸 64.227.49.212

🇸🇬 47.84.138.233

🇫🇷 38.60.134.49

🇳🇱 195.178.110.22

🇫🇷 192.177.47.225

🇨🇳 123.160.223.73

🇿🇦 102.253.45.9

🇺🇦 94.244.53.147

🇺🇸 65.49.1.182