JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.228.157.228

43.228.157.228 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 100%: ?

100%

ISP	Cyber-Security-SG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205759
Domain Name	pointtoserver.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.228.157.228

Whois 43.228.157.228

IP Abuse Reports for 43.228.157.228:

This IP address has been reported a total of 160 times from 102 distinct sources. 43.228.157.228 was first reported on July 25th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 services.org.pl	2026-07-31 12:49:36 (2 hours ago)	open() "/var/www/html/.env" failed (2: No such file or directory), client: 43.228.157.228, server: a ... show more open() "/var/www/html/.env" failed (2: No such file or directory), client: 43.228.157.228, server: api.services.org.pl, request: "GET /.env HTTP/1.1", host: "46.102.157.176" show less	Bad Web Bot Web App Attack
🇬🇧 gurnip	2026-07-31 11:58:50 (3 hours ago)	Vulnerability probe of page /.env, not found on server.	Brute-Force Web App Attack
Anonymous	2026-07-31 07:19:50 (7 hours ago)	43.228.157.228 - - [31/Jul/2026:07:19:50 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; ... show more 43.228.157.228 - - [31/Jul/2026:07:19:50 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇮 Maxetow	2026-07-31 06:25:51 (8 hours ago)	Scan port: 80 \| 2 total \| size=52B	Port Scan
🇪🇸 alferez	2026-07-31 04:27:30 (10 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇩🇪 D3vNu11	2026-07-31 02:46:08 (12 hours ago)	Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: Pakistan 3x -> Target Country: Polen HT ... show more Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: Pakistan 3x -> Target Country: Polen HTTPS show less	Hacking Web App Attack
🇷🇸 Smel	2026-07-31 01:15:13 (13 hours ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇳🇱 BlueWire Hosting	2026-07-31 00:41:11 (14 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 CollideTech	2026-07-31 00:19:56 (14 hours ago)	probing for vulnerabilities	Web App Attack
Anonymous	2026-07-30 22:30:25 (16 hours ago)	2026-07-31T00:30:24.604576+02:00 vps kernel: [1821473.909499] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-07-31T00:30:24.604576+02:00 vps kernel: [1821473.909499] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=43.228.157.228 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=62499 PROTO=TCP SPT=50234 DPT=587 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇮 oh.mg	2026-07-30 22:19:33 (16 hours ago)	[Fri Jul 31 00:19:32.665074 2026] [security2:error] [pid 3600462:tid 3600475] [client 43.228.157.228 ... show more [Fri Jul 31 00:19:32.665074 2026] [security2:error] [pid 3600462:tid 3600475] [client 43.228.157.228:57010] [client 43.228.157.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "amvN9Pb8l2wNDzLOKvkeJAAAAIs"] [Fri Jul 31 00:19:33.142647 2026] [security2:error] [pid 3600605:tid 3600627] [client 43.228.157.228:57037] [client 43.228.157.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [t ... show less	Web App Attack Bad Web Bot
Anonymous	2026-07-30 21:08:28 (17 hours ago)	43.228.157.228 - - [30/Jul/2026:23:08:28 +0200] "GET /.env HTTP/1.1" 403 2405 "-" "Mozilla/5.0 (X11; ... show more 43.228.157.228 - - [30/Jul/2026:23:08:28 +0200] "GET /.env HTTP/1.1" 403 2405 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇷 Security_Whaller	2026-07-30 21:08:25 (17 hours ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇳🇱 bazter.pro	2026-07-30 20:44:51 (18 hours ago)	43.228.157.228 - - [30/Jul/2026:20:44:50 +0000] "GET /.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; ... show more 43.228.157.228 - - [30/Jul/2026:20:44:50 +0000] "GET /.env HTTP/1.1" 404 293 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2026-07-30 20:18:40 (18 hours ago)	[Thu Jul 30 22:18:38.981063 2026] [authz_core:error] [pid 21325] [client 43.228.157.228:60289] AH016 ... show more [Thu Jul 30 22:18:38.981063 2026] [authz_core:error] [pid 21325] [client 43.228.157.228:60289] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jul 30 22:18:39.040810 2026] [authz_core:error] [pid 20122] [client 43.228.157.228:60296] AH01630: client denied by server configuration: /etc/httpd/htdocs [Thu Jul 30 22:18:39.283055 2026] [access_compat:error] [pid 21326] [client 43.228.157.228:60307] AH01797: client denied by server configuration: /var/www/html/.env ... show less	Web App Attack

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 152.67.48.120

🇺🇸 136.108.16.237

🇮🇳 122.176.154.222

🇺🇸 119.13.198.13

🇮🇩 36.64.131.68

🇺🇸 35.245.157.134

🇬🇧 35.203.210.15

🇺🇸 24.128.75.203

🇺🇸 20.228.116.36

🇵🇰 223.123.35.173

🇨🇳 180.102.110.157

🇫🇮 147.185.133.51

🇸🇪 130.49.8.139

🇻🇳 113.172.118.241

🇧🇩 103.240.4.72

🇺🇸 66.132.186.223

🇺🇸 66.132.186.133

🇺🇸 52.35.20.1

🇨🇦 51.79.65.194

🇳🇱 45.148.10.141