JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.159.33.227

43.159.33.227 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 57%: ?

57%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.159.33.227

Whois 43.159.33.227

IP Abuse Reports for 43.159.33.227:

This IP address has been reported a total of 33 times from 9 distinct sources. 43.159.33.227 was first reported on June 8th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Lezetho	2026-06-10 00:04:22 (11 hours ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
Anonymous	2026-06-09 06:39:23 (1 day ago)	Illegitimate and/or suspicious requests.	Hacking
Anonymous	2026-06-09 03:42:32 (1 day ago)	Malicious activity detected	Hacking Web App Attack
🇳🇱 myip.foo	2026-06-08 23:23:48 (1 day ago)	[myip.foo] 43.159.33.227 - - [08/Jun/2026:23:23:47 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 ... show more [myip.foo] 43.159.33.227 - - [08/Jun/2026:23:23:47 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-08 23:20:23 (1 day ago)	(mod_security-custom) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 3600 se ... show more (mod_security-custom) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-08 23:07:25 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:07:18.908918 2026] [security2:error] [pid 12609:tid 12609] [client 43.159.33.227:54796] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|apenglishexamprep.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "apenglishexamprep.com"] [uri "/"] [unique_id "aidLJqIUEvEw2i9FqjqnZwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 22:48:00 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:47:52.151056 2026] [security2:error] [pid 15563:tid 15563] [client 43.159.33.227:53554] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.davidtempleofdeliverance.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.davidtempleofdeliverance.org"] [uri "/"] [unique_id "aidGmEiokl2zAOrfLxp-pQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 22:30:06 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:29:59.188351 2026] [security2:error] [pid 16039:tid 16039] [client 43.159.33.227:51146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.paardekooper.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paardekooper.info"] [uri "/"] [unique_id "aidCZ5S-M4BGbeGFVeKfowAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 22:05:08 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 18:05:03.961461 2026] [security2:error] [pid 31346:tid 31346] [client 43.159.33.227:36092] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.garagemensministry.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.garagemensministry.org"] [uri "/"] [unique_id "aic8j7ZZou-XXZkyDIRqdQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 21:34:34 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 17:34:26.566743 2026] [security2:error] [pid 2634:tid 2634] [client 43.159.33.227:41590] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.riverflow.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.riverflow.com"] [uri "/"] [unique_id "aic1YovsMOtTB6BqHAX4lgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 20:29:58 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:29:52.649511 2026] [security2:error] [pid 26073:tid 26073] [client 43.159.33.227:60698] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bernabeu.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bernabeu.org"] [uri "/"] [unique_id "aicmQFeHGuwVDHD_NLsSVQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 20:10:59 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:10:51.794784 2026] [security2:error] [pid 15170:tid 15170] [client 43.159.33.227:40278] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arborterra.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arborterra.org"] [uri "/"] [unique_id "aichyynY6TBm-biexTAuAAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 19:53:06 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:52:59.951312 2026] [security2:error] [pid 19814:tid 19814] [client 43.159.33.227:52726] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|andy-blakk.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "andy-blakk.org"] [uri "/"] [unique_id "aicdmw91Jsd_szrWo19weAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 18:58:29 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 43.159.33.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:58:25.862952 2026] [security2:error] [pid 31690:tid 31690] [client 43.159.33.227:43322] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.wilsonclassof81.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wilsonclassof81.org"] [uri "/"] [unique_id "aicQ0Y8eYMd8c74YPzZdLAAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-08 18:43:01 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.168.118.133

🇳🇱 176.65.140.201

🇳🇱 176.65.139.45

🇺🇸 165.154.162.126

🇮🇳 139.59.6.237

🇨🇳 116.140.210.113

🇮🇳 103.78.182.18

🇺🇸 64.62.156.223

🇺🇸 18.217.149.46

🇺🇸 2a13:9500:16b:5e38::1

🇲🇳 202.21.121.117

🇭🇰 199.45.155.89

🇺🇸 178.238.93.22

🇦🇺 170.64.167.72

🇻🇪 154.200.237.145

🇮🇳 152.52.15.213

🇺🇸 149.255.39.70

🇺🇸 107.167.34.125

🇭🇰 103.30.40.129

🇺🇸 91.230.168.212