JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.168.149.230

43.168.149.230 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 11%: ?

11%

ISP	ACEVILLE PTE.LTD.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS139341
Domain Name	tencent.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.168.149.230

Whois 43.168.149.230

IP Abuse Reports for 43.168.149.230:

This IP address has been reported a total of 9 times from 2 distinct sources. 43.168.149.230 was first reported on August 7th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 oh.mg	2026-09-22 08:03:42 (1 day ago)	[Tue Sep 22 10:03:40.553182 2026] [security2:error] [pid 2116937:tid 2116962] [client 43.168.149.230 ... show more [Tue Sep 22 10:03:40.553182 2026] [security2:error] [pid 2116937:tid 2116962] [client 43.168.149.230:10345] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.anthropic"] [unique_id "arI2XGJ4SddqHbNsHYfueAAAABc"] ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-18 21:19:45 (4 days ago)	[Fri Sep 18 23:19:44.698511 2026] [security2:error] [pid 3900343:tid 3900348] [client 43.168.149.230 ... show more [Fri Sep 18 23:19:44.698511 2026] [security2:error] [pid 3900343:tid 3900348] [client 43.168.149.230:55973] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "goatsea.tacobele.com"] [uri "/.env.backup"] [unique_id "aq2q8Gl19WZ_7oLKajyaswAAAIE"], referer: http://goatsea.tacobele.com:80/.env.backup ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-17 05:47:01 (6 days ago)	[Thu Sep 17 07:47:00.345038 2026] [security2:error] [pid 2761728:tid 2761739] [client 43.168.149.230 ... show more [Thu Sep 17 07:47:00.345038 2026] [security2:error] [pid 2761728:tid 2761739] [client 43.168.149.230:24624] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.vscode/settings.json"] [unique_id "aqt-1Gztjyrj5q-hsbAmcgAAAEk"] ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-16 04:33:30 (1 week ago)	[Wed Sep 16 06:33:29.785028 2026] [security2:error] [pid 2049286:tid 2049307] [client 43.168.149.230 ... show more [Wed Sep 16 06:33:29.785028 2026] [security2:error] [pid 2049286:tid 2049307] [client 43.168.149.230:8337] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/config"] [unique_id "aqocGWKjkNcQd231DgJUHgAAANM"] ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-15 20:03:14 (1 week ago)	[Tue Sep 15 22:03:13.491849 2026] [security2:error] [pid 1785658:tid 1785660] [client 43.168.149.230 ... show more [Tue Sep 15 22:03:13.491849 2026] [security2:error] [pid 1785658:tid 1785660] [client 43.168.149.230:43856] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/config"] [unique_id "aqmkgcUEzZ2NJcY-otU8nAAAAMA"] ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-14 09:22:34 (1 week ago)	[Mon Sep 14 11:22:34.023541 2026] [security2:error] [pid 1003821:tid 1003827] [client 43.168.149.230 ... show more [Mon Sep 14 11:22:34.023541 2026] [security2:error] [pid 1003821:tid 1003827] [client 43.168.149.230:55499] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/_profiler/phpinfo"] [unique_id "aqe82sOODwZ3GjPjTP7T-AAAAQQ"] ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-13 16:16:13 (1 week ago)	[Sun Sep 13 18:16:10.222458 2026] [security2:error] [pid 2837223:tid 2837235] [client 43.168.149.230 ... show more [Sun Sep 13 18:16:10.222458 2026] [security2:error] [pid 2837223:tid 2837235] [client 43.168.149.230:65307] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.test"] [unique_id "aqbMSm8jh73Gz_sYBODMfwAAAEo"] [Sun Sep 13 18:16:12.529681 2026] [security2:error] [pid 2837223:tid 2837245] [client 43.168.149.230:65307] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0 ... show less	Web App Attack Bad Web Bot
🇫🇮 oh.mg	2026-09-10 21:31:25 (1 week ago)	[Thu Sep 10 23:31:08.277043 2026] [security2:error] [pid 1185482:tid 1185510] [client 43.168.149.230 ... show more [Thu Sep 10 23:31:08.277043 2026] [security2:error] [pid 1185482:tid 1185510] [client 43.168.149.230:12739] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/server/.env"] [unique_id "aqMhnOSDyEA50PCJL3vL8gAAAFA"] [Thu Sep 10 23:31:24.659507 2026] [security2:error] [pid 1213289:tid 1213312] [client 43.168.149.230:60141] [client 43.168.149.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10 ... show less	Web App Attack Bad Web Bot
🇬🇧 Dominicwu	2026-08-07 00:48:43 (1 month ago)	2026-08-07T00:47:43.667870uklite-202607141837480ec330 kernel: [2037576.805054] F2B-PORTSCAN IN=eth0 ... show more 2026-08-07T00:47:43.667870uklite-202607141837480ec330 kernel: [2037576.805054] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=43.168.149.230 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=52659 DF PROTO=TCP SPT=17622 DPT=9999 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-07T00:47:43.772607uklite-202607141837480ec330 kernel: [2037576.909882] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=43.168.149.230 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=52660 DF PROTO=TCP SPT=17622 DPT=9999 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-07T00:47:47.430862uklite-202607141837480ec330 kernel: [2037580.568064] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=43.168.149.230 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=34001 DF PROTO=TCP SPT=21942 DPT=9999 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-07T00:47:47.532697uklite-202607141837480ec330 kernel: [2037580.669870] F2B-PORTSCAN IN=eth0 OUT= MAC= ... show less	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 160.119.66.206

🇳🇱 94.154.43.129

🇨🇦 85.217.149.16

🇳🇱 34.34.102.245

🇳🇱 34.32.254.143

🇩🇪 213.209.159.41

🇯🇴 212.118.18.108

🇺🇸 195.184.76.189

🇷🇴 193.32.162.84

🇰🇷 175.198.62.180

🇺🇸 172.236.96.130

🇩🇪 167.94.145.18

🇬🇫 92.142.91.144

🇺🇸 66.132.186.217

🇳🇱 45.148.10.166

🇺🇸 34.186.83.13

🇪🇸 34.175.60.37

🇯🇵 34.146.215.236

🇷🇴 2.57.121.25

🇺🇸 195.184.76.117