JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.172.196.216

43.172.196.216 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 31%: ?

31%

ISP	ACEVILLE PTE.LTD.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.172.196.216

Whois 43.172.196.216

IP Abuse Reports for 43.172.196.216:

This IP address has been reported a total of 17 times from 10 distinct sources. 43.172.196.216 was first reported on April 13th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-08 05:55:39 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/tags/154081 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2026-06-07 01:14:03 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /booru/artist/%EF%BE%8AYU \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-06 14:47:03 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-06-06 00:20:31 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-06-04 13:52:22 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-12 07:30:07 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-10 11:13:01 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/shendriti-juela-apo-edisa-ja-kush-e-le-shtepine-e-big-brother-me-pak-se-dy-jave-para-finales/870930 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-05-10 04:35:19 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 bigorre.org	2026-05-08 14:09:30 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-08 10:46:05 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 43.172.196.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 43.172.196.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 06:45:59.099704 2026] [security2:error] [pid 9470:tid 9470] [client 43.172.196.216:53720] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.byles.net\|F\|2"] [data ".oka4wd.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.byles.net"] [uri "/www.oka4wd.com"] [unique_id "af2-5_SV3cykr1wmuVDo4QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-05-08 09:02:30 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/banori-i-bbvk-jep-lajmin-e-papritur-ishte-nje-udhetim-shume-i-bukur-por-me-duhet-te-largohem/855486 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-05-08 02:40:01 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 vdub144	2026-05-08 01:21:10 (1 month ago)	Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpr ... show more Automated report from Gross Automation security system. \| Attack type: attack_path \| Path: /searchpro/form.php?mode=js&g=23&s=1&t=1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 \| Blocked by: nginx-bot-hell show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 00:25:11 (1 month ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/43.172.196.216 2026-05-0 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/43.172.196.216 2026-05-06 22:43:23 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Faqts%2F202601%2Ft20260122_1411478.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip"],"Accept-Language":["en-US,en;q=0.9"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"43.172.196.216:57634","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"} show less	Web App Attack
🇷🇴 INTEQ	2026-05-03 01:50:59 (1 month ago)	Web attack from 43.172.196.216	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:100c:a220:8891:d04b:2e6:ed2c:1a45

🇬🇧 198.105.100.26

🇬🇧 191.96.110.39

🇮🇳 182.78.87.2

🇺🇸 147.185.132.150

🇺🇸 74.125.224.72

🇺🇸 65.49.1.33

🇬🇧 51.68.212.2

🇱🇹 45.227.254.170

🇸🇬 43.173.178.15

🇺🇸 43.173.126.157

🇭🇰 43.154.127.188

🇮🇩 41.216.177.55

🇷🇺 37.77.150.241

🇹🇼 35.221.234.181

🇹🇼 35.194.234.87

🇺🇸 34.106.172.147

🇬🇧 185.247.137.208

🇫🇷 185.177.72.58

🇫🇮 147.185.133.129