JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.134.3.111

43.134.3.111 was found in our database!

This IP was reported 336 times. Confidence of Abuse is 100%: ?

100%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.134.3.111

Whois 43.134.3.111

IP Abuse Reports for 43.134.3.111:

This IP address has been reported a total of 336 times from 135 distinct sources. 43.134.3.111 was first reported on June 26th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 ferique	2026-08-18 10:56:29 (4 hours ago)	Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-18 13:56:25.8988 Login failure: 43.134.3.1 ... show more Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-18 13:56:25.8988 Login failure: 43.134.3.111 DNN_AUTH 2 show less	Web App Attack Bad Web Bot
🇵🇱 Budyn	2026-08-18 10:26:40 (5 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.astropot.store \| URI: /wp-admin/ \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-18 09:21:02 (6 hours ago)	FortiWeb WAF: 24 attacks detected. Threat Score: 7600. Types: Client Management(12), GEO IP(12). Ori ... show more FortiWeb WAF: 24 attacks detected. Threat Score: 7600. Types: Client Management(12), GEO IP(12). Origin: Singapore. show less	Web App Attack
🇺🇸 donarev419	2026-08-18 01:40:15 (13 hours ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:80 Use ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:80 User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like show less	Port Scan Hacking
🇹🇷 ferique	2026-08-18 00:42:24 (14 hours ago)	Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-18 03:42:20.5044 Login failure: 43.134.3.1 ... show more Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-18 03:42:20.5044 Login failure: 43.134.3.111 DNN_AUTH show less	Web App Attack Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-08-17 21:48:25 (17 hours ago)	2026-08-17T21:48:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-08-17T21:48:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.134.3.111 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=55235 DF PROTO=TCP SPT=50068 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-17T21:48:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.134.3.111 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=55236 DF PROTO=TCP SPT=50068 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-17T21:48:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.134.3.111 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=55237 DF PROTO=TCP SPT=50068 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇵🇱 Budyn	2026-08-17 20:02:37 (19 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.astropot.site \| URI: /wp-admin/admin-ajax.php \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇰🇷 HexByte	2026-08-17 14:42:53 (1 day ago)	[daon] Web scan/abuse: 1 events (web_junk). paths: GET / -> 400. sample: 43.134.3.111 - - [17/Aug/20 ... show more [daon] Web scan/abuse: 1 events (web_junk). paths: GET / -> 400. sample: 43.134.3.111 - - [17/Aug/2026:23:42:53 +0900] "GET / HTTP/1.1" 400 255 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E1 show less	Web App Attack Hacking
🇺🇸 MaxSmartCode	2026-08-17 13:44:00 (1 day ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
🇩🇪 big-cloud.nl	2026-08-17 12:46:23 (1 day ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 gerensat	2026-08-17 02:54:31 (1 day ago)	2026-08-16 23:54:31 \| / \| [] \| Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/ ... show more 2026-08-16 23:54:31 \| / \| [] \| Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 show less	Web App Attack
🇪🇸 librebit	2026-08-17 02:40:53 (1 day ago)	Brute force	Brute-Force
🇹🇷 ferique	2026-08-16 23:05:18 (1 day ago)	Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-17 02:05:13.9309 Login failure: 43.134.3.1 ... show more Real-time Intercept: DNN_AUTH attack. Reference: 2026-08-17 02:05:13.9309 Login failure: 43.134.3.111 DNN_AUTH show less	Web App Attack Bad Web Bot
🇪🇸 el-brujo	2026-08-16 15:07:37 (2 days ago)	16/Aug/2026:17:07:36.962004 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 16/Aug/2026:17:07:36.962004 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 43.134.3.111] ModSecurity: Warning. Pattern match "\\\\\\\\b(?:keep-alive\|close),\\\\\\\\s?(?:keep-alive\|close)\\\\\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "339"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "papyre.elhacker.info"] [uri "/A/Aames, Lani/The Wolf Man\\\\xc2\\\\xb4S Legacy/The Wolf Man\\\\xc2\\\\xb4S Legacy.fb2"] [unique_id "aoHSOICqtr1HBP1gYEmDBgAACws"] ... show less	Hacking Web App Attack
🇺🇸 xxkodedxx	2026-08-16 10:59:35 (2 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: SG / AS132203 Shenzhen Tencent Computer Systems Company Limited Active: 10:59:01 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 336 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 129.122.175.141

🇩🇪 69.5.169.191

🇺🇸 15.204.94.55

🇩🇪 213.209.159.231

🇱🇹 213.176.26.153

🇮🇩 163.7.6.114

🇺🇸 162.241.239.202

🇺🇸 162.241.130.19

🇸🇬 159.65.2.17

🇷🇴 138.199.53.212

🇨🇳 118.122.147.49

🇨🇳 113.232.187.49

🇭🇰 101.36.110.41

🇺🇸 38.154.185.119

🇺🇸 153.75.82.149

🇫🇷 149.202.50.58

🇺🇸 146.190.72.246

🇮🇳 139.59.28.125

🇫🇷 91.196.152.14

🇳🇱 91.92.42.36