JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.228.157.67

43.228.157.67 was found in our database!

This IP was reported 786 times. Confidence of Abuse is 100%: ?

100%

ISP	Cyber-Security-SG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205759
Domain Name	pointtoserver.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.228.157.67

Whois 43.228.157.67

IP Abuse Reports for 43.228.157.67:

This IP address has been reported a total of 786 times from 328 distinct sources. 43.228.157.67 was first reported on February 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vasile	2026-06-19 22:25:25 (2 days ago)	Shield Guard: Blocklist: IP signalée (blocklist_de) \| Scanner: go-http-client (+20) \| Chemin suspect ... show more Shield Guard: Blocklist: IP signalée (blocklist_de) \| Scanner: go-http-client (+20) \| Chemin suspect: /.git show less	Web App Attack
🇺🇸 kosada.com	2026-05-31 14:42:50 (3 weeks ago)	Web vulnerability probing: /.git/index	Web App Attack
Anonymous	2026-05-31 14:11:01 (3 weeks ago)	(caddyscan) Scanner path probe from 43.228.157.67 (SG/Singapore/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 43.228.157.67 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 43.228.157.67 - - [31/May/2026:14:10:57 +0000] "GET /.git/logs/HEAD HTTP/1.1" [REDACTED] 200 2627 43.228.157.67 - - [31/May/2026:14:10:57 +0000] "GET /.git/refs/heads/main HTTP/1.1" [REDACTED] 200 2627 43.228.157.67 - - [31/May/2026:14:10:57 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 43.228.157.67 - - [31/May/2026:14:10:57 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 43.228.157.67 - - [31/May/2026:14:10:57 +0000] "GET /.git/index HTTP/1.1" show less	Port Scan
🇺🇸 cwytech	2026-05-31 13:02:31 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-05-31 12:33:45 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 jfz-abuse	2026-05-31 12:25:03 (3 weeks ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇬🇧 consul.to	2026-05-31 10:32:03 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 ACE-INFORMATIQUE.NC	2026-05-31 00:24:32 (3 weeks ago)	Web App Attack blocked by Fail2ban	Web App Attack
Anonymous	2026-05-30 21:25:11 (3 weeks ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 RH5	2026-05-30 17:28:52 (3 weeks ago)	Restricted URL probing (/.git) (UTC 2026-05-30 17:28)	Web App Attack
🇫🇷 LoneRider	2026-05-30 04:41:36 (3 weeks ago)	[30/May/2026:06:41:36.182743 +0200] ahpqgCHbq2tQ36AmHC8zhgAAAAE 43.228.157.67 51548 127.0.0.1 7081 [ ... show more [30/May/2026:06:41:36.182743 +0200] ahpqgCHbq2tQ36AmHC8zhgAAAAE 43.228.157.67 51548 127.0.0.1 7081 [30/May/2026:06:41:36.182995 +0200] ahpqgA4ewrY2pbDXmTJibgAAAAY 43.228.157.67 51538 127.0.0.1 7081 [30/May/2026:06:41:36.183125 +0200] ahpqgFRQZzaAhDO1KLa-bwAAAAI 43.228.157.67 51544 127.0.0.1 7081 ... show less	Hacking
🇩🇪 Nevermind	2026-05-30 02:25:41 (3 weeks ago)	43.228.157.67 - - [30/May/2026:04:25:40 +0200] "GET /.git/logs/HEAD HTTP/1.1" 403 4173 "-" "Mozilla/ ... show more 43.228.157.67 - - [30/May/2026:04:25:40 +0200] "GET /.git/logs/HEAD HTTP/1.1" 403 4173 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 43.228.157.67 - - [30/May/2026:04:25:40 +0200] "GET /.git/config HTTP/1.1" 403 4173 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 43.228.157.67 - - [30/May/2026:04:25:40 +0200] "GET /.git/refs/heads/master HTTP/1.1" 403 4173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 43.228.157.67 - - [30/May/2026:04:25:40 +0200] "GET /.git/HEAD HTTP/1.1" 403 4173 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack
🇬🇧 consul.to	2026-05-30 00:25:58 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 Gem	2026-05-29 22:11:14 (3 weeks ago)	Unauthorized web scan.	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 21:18:31 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 43.228.157.67 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 43.228.157.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 17:18:27.072399 2026] [security2:error] [pid 6991:tid 6991] [client 43.228.157.67:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abdulhameeds.art"] [uri "/.git/refs/heads/master"] [unique_id "ahixIxncqSQUq6cEkimDdAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 786 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 212.154.234.9

🇺🇸 3.87.27.156

🇻🇳 210.245.20.230

🇳🇱 193.176.31.202

🇬🇧 193.163.125.103

🇲🇽 189.217.130.86

🇦🇿 158.181.46.7

🇷🇴 141.98.83.240

🇺🇸 130.131.161.238

🇨🇳 60.216.89.122

🇨🇦 52.139.41.31

🇮🇷 31.14.116.175

🇫🇷 13.140.146.164

🇺🇸 172.217.37.216

🇩🇪 134.122.93.100

🇳🇱 91.92.40.13

🇨🇳 60.167.19.189

🇸🇬 47.84.112.185

🇸🇬 47.79.126.220

🇱🇹 45.227.254.170