JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

197.243.113.130

Neutral Activity

Abuse confidence score ?

0% Low Risk

221 reports

60 reporters · latest 1 year ago

ISP	BSC
Usage Type	Fixed Line ISP
ASN	AS37228
Domain Name	bsc.rw
Country	🇷🇼 Rwanda
City	Kigali, Kigali

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

197.243.113.130 has been reported 221 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 197.243.113.130

Export CSV

This IP address has been reported a total of 221 times from 60 distinct sources. 197.243.113.130 was first reported on September 1st 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2025-07-19 07:24:04 (1 year ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: www.elhacker.net userAgent: Mozilla/ ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Action: managed_challenge Source: firewallManaged ASN Description: Olleh-Rwanda-Networks Country: RW Method: GET Timestamp: 2025-07-19T07:24:04Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-07-19 07:24:04 (1 year ago)	[Sat Jul 19 09:24:03.371888 2025] [proxy_fcgi:error] [pid 2438200:tid 2438212] [remote 197.243.113.1 ... show more [Sat Jul 19 09:24:03.371888 2025] [proxy_fcgi:error] [pid 2438200:tid 2438212] [remote 197.243.113.130:0] AH01071: Got error 'Primary script unknown\n' [Sat Jul 19 09:24:04.305750 2025] [proxy_fcgi:error] [pid 2613415:tid 2613433] [remote 197.243.113.130:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-06-06 08:20:32 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-01-13 13:19:32 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-27 14:15:22 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 197.243.113.130 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 197.243.113.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 27 09:15:15.700328 2024] [security2:error] [pid 4126954:tid 4126954] [client 197.243.113.130:50453] [client 197.243.113.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z262c40ZEcRuwiwIXXXbmgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2024-12-20 07:10:22 (1 year ago)	197.243.113.130 - - [20/Dec/2024:09:10:21 +0200] "GET /wp-login.php HTTP/1.1" 404 2860 "-" "Mozilla/ ... show more 197.243.113.130 - - [20/Dec/2024:09:10:21 +0200] "GET /wp-login.php HTTP/1.1" 404 2860 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 197.243.113.130 - - [20/Dec/2024:09:10:22 +0200] "GET /xmlrpc.php HTTP/1.1" 404 542 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇬🇧 findlab	2024-12-17 12:30:01 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-12-12 06:20:00 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2024-12-02 09:49:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-12-02 09:04:47 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2024-11-25 09:06:09 (1 year ago)	[Mon Nov 25 10:06:08.866961 2024] [proxy_fcgi:error] [pid 2541823:tid 2543072] [client 197.243.113.1 ... show more [Mon Nov 25 10:06:08.866961 2024] [proxy_fcgi:error] [pid 2541823:tid 2543072] [client 197.243.113.130:62998] AH01071: Got error 'Primary script unknown' [Mon Nov 25 10:06:09.435012 2024] [proxy_fcgi:error] [pid 2607153:tid 2607283] [client 197.243.113.130:63003] AH01071: Got error 'Primary script unknown' ... show less	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2024-11-25 00:43:20 (1 year ago)	GET /xmlrpc.php HTTP/1.1	Web App Attack
🇺🇦 URAN Publishing Service	2024-11-21 06:49:54 (1 year ago)	197.243.113.130 - - [21/Nov/2024:08:49:50 +0200] "GET /wp-login.php HTTP/1.1" 404 2846 "-" "Mozilla/ ... show more 197.243.113.130 - - [21/Nov/2024:08:49:50 +0200] "GET /wp-login.php HTTP/1.1" 404 2846 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 197.243.113.130 - - [21/Nov/2024:08:49:52 +0200] "GET /wp-login.php HTTP/1.1" 404 2854 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-11-14 10:13:14 (1 year ago)	197.243.113.130 - - [14/Nov/2024:12:13:11 +0200] "GET /wp-login.php HTTP/1.1" 404 2845 "-" "Mozilla/ ... show more 197.243.113.130 - - [14/Nov/2024:12:13:11 +0200] "GET /wp-login.php HTTP/1.1" 404 2845 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 197.243.113.130 - - [14/Nov/2024:12:13:14 +0200] "GET /xmlrpc.php HTTP/1.1" 404 2767 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇦🇺 MAGIC	2024-11-13 05:22:57 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.24.173

🇳🇱 109.160.32.167

🇺🇸 2a00:1450:4864:20::42b

🇨🇳 223.243.126.151

🇳🇱 193.47.62.69

🇺🇸 147.90.234.15

🇮🇳 103.206.131.33

🇫🇷 82.208.21.115

🇫🇮 80.66.83.43

🇺🇸 74.109.58.224

🇩🇪 69.5.169.131

🇺🇸 67.205.140.79

🇺🇸 52.54.157.23

🇪🇸 172.68.134.125

🇺🇸 146.88.241.50

🇺🇸 129.121.99.2

🇨🇳 121.229.107.184

🇺🇿 94.158.49.223

🇺🇸 66.249.90.39

🇺🇸 66.249.90.33