JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

43.159.34.167

Recent Activity

Abuse confidence score ?

100% Critical

1,169 reports

247 reporters · latest 2 hours ago

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 43.159.34.167

Export CSV

This IP address has been reported a total of 1,169 times from 247 distinct sources. 43.159.34.167 was first reported on June 23rd 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Poland with 144 reports; United States of America with 134 reports; Germany with 131 reports. The most common categories in these recent reports were: Web App Attack 452 times; Bad Web Bot 265 times; Hacking 140 times; Port Scan 111 times; Brute-Force 105 times; Other 61 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hugopvigo	2026-07-30 21:40:45 (2 months ago)	"2026-07-30 21:40:45+00:00 43.159.34.167 IP con score alto (100) detectada en el log."	Brute-Force SSH
🇲🇽 FenixHunter🐦‍🔥	2026-07-30 20:48:18 (2 months ago)	Blocked TLS Cipher Downgrade Attemp. Action Performed: DROP	Port Scan Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-07-30 20:25:27 (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.site \| URI: /docker-compose.yml \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 HamSammich	2026-07-30 18:27:33 (2 months ago)	Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-07-30T18:27Z).	Brute-Force Web App Attack
🇬🇧 OptimusGO	2026-07-30 09:26:17 (2 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-30 10:26:17 UTC Log evidence: 43.159.34.167 - - [30/Jul/2026:10:26:16 +0100] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 07/30/2026-10:26:17.091325 [] [1:2221035:1] SURICATA HTTP Request excessive header repetition [] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} 43.159.34.167:33098 -> 185.127.18.66:80 show less	Port Scan Brute-Force
🇺🇸 azminawwar	2026-07-30 06:08:16 (2 months ago)	[43.159.34.167] triggered by honeypot on port [80], Timestamp [2026-07-30T06:08:16Z]METHOD=GET PATH= ... show more [43.159.34.167] triggered by honeypot on port [80], Timestamp [2026-07-30T06:08:16Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (K show less	Port Scan Hacking
🇭🇺 kranem	2026-07-30 06:00:19 (2 months ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 132203 (Tencent Building, Kejizhongyi Ave ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 132203 (Tencent Building, Kejizhongyi Avenue) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-30T03:29:12Z User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 show less	Bad Web Bot
🇺🇸 cwytech	2026-07-30 05:43:00 (2 months ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-07-30 03:58:50 (2 months ago)	"Multiple/Conflicting Connection Header Data Found - keep-alive, close"	Web App Attack
🇯🇵 pixelboost.kr	2026-07-30 01:45:14 (2 months ago)	43.159.34.167 - - [30/Jul/2026:10:45:13 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU ... show more 43.159.34.167 - - [30/Jul/2026:10:45:13 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" ... show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-30 00:59:21 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 juguemosalacarioca.com	2026-07-29 22:36:57 (2 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇦🇹 Pingger Shikkoken	2026-07-29 19:44:48 (2 months ago)	2026-07-29T19:44:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-29T19:44:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.159.34.167 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=35660 DF PROTO=TCP SPT=37552 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-07-29T19:44:49+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.159.34.167 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=35661 DF PROTO=TCP SPT=37552 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-07-29T19:44:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.159.34.167 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=35662 DF PROTO=TCP SPT=37552 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇸 HamSammich	2026-07-29 18:43:09 (2 months ago)	Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-07-29T18:43Z).	Brute-Force Web App Attack
🇨🇦 1gz	2026-07-29 16:33:37 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 766 to 780 of 1169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.108

🇵🇰 119.157.76.232

🇲🇾 2402:1980:81b:9440:5d7a:241:29f0:2dd2

🇫🇷 141.101.69.150

🇫🇷 86.202.166.84

🇩🇪 69.5.169.223

🇬🇧 35.203.210.37

🇯🇵 34.146.127.179

🇨🇿 212.102.39.12

🇨🇳 183.136.47.165

🇨🇳 175.178.184.121

🇩🇪 130.12.180.184

🇹🇼 125.229.194.81

🇰🇷 118.39.219.45

🇨🇳 115.190.253.104

🇷🇴 92.118.39.228

🇫🇷 91.196.152.236

🇧🇷 69.6.222.101

🇧🇷 45.182.153.184

🇰🇷 43.131.243.61