JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.243.88.2

197.243.88.2 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 0%: ?

ISP	East and South areas
Usage Type	Fixed Line ISP
ASN	AS37228
Domain Name	bsc.rw
Country	🇷🇼 Rwanda
City	Kigali, Kigali

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.243.88.2

Whois 197.243.88.2

IP Abuse Reports for 197.243.88.2:

This IP address has been reported a total of 52 times from 22 distinct sources. 197.243.88.2 was first reported on January 15th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-10-18 05:35:41 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 197.243.88.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 197.243.88.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 01:35:33.685295 2025] [security2:error] [pid 8746:tid 8746] [client 197.243.88.2:53641] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPMnJf08Mw0Mnx2CJjuQSwAAAAY"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-10-11 12:13:20 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇲🇾 syokadmin	2025-09-27 22:43:07 (9 months ago)	197.243.88.2 (RW/Rwanda/-), 5 distributed SMTP Logins on account [[email protected]] in the ... show more 197.243.88.2 (RW/Rwanda/-), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 nowyouknow	2025-09-27 00:13:51 (9 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-09-07 04:15:12 (10 months ago)	(From [email protected])	Phishing Web Spam
🇫🇷 dynamix	2025-08-22 07:22:00 (10 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 nowyouknow	2025-08-18 02:57:39 (10 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-08-17 05:54:54 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 197.243.88.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 197.243.88.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 17 01:54:50.950084 2025] [security2:error] [pid 17177:tid 17177] [client 197.243.88.2:39327] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aKFuqs6psqb15IWVZLmtmAAAAAQ"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-19 17:53:20 (11 months ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
🇲🇾 syokadmin	2025-07-19 01:52:03 (11 months ago)	197.243.88.2 (RW/Rwanda/-), 2 distributed smtpauth attacks on account [[email protected]] in the l ... show more 197.243.88.2 (RW/Rwanda/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇬🇧 Spidrweb.co.uk	2025-06-23 16:40:48 (1 year ago)	Brute-Force WordPress attack (85.155)	Web App Attack
🇩🇪 zeitschel.net	2025-05-15 08:31:52 (1 year ago)	2025-05-15 10:31:38 Unauthorized /owa/auth.owa	Hacking Web App Attack
🇩🇪 zeitschel.net	2025-05-10 20:06:03 (1 year ago)	2025-05-10 22:05:40 Unauthorized /owa/auth.owa	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-05-05 22:15:21 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/197.243.88.2	Brute-Force
🇨🇳 ThreatBook.io	2025-05-03 22:15:52 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/197.243.88.2	Brute-Force

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.186

🇻🇳 171.243.148.107

🇺🇸 147.185.132.118

🇺🇸 65.49.1.177

🇲🇾 47.254.206.59

🇧🇷 190.115.84.25

🇳🇱 172.94.9.75

🇧🇩 103.163.97.211

🇹🇷 95.15.212.161

🇨🇳 42.7.219.122

🇨🇳 14.103.112.112

🇪🇪 5.157.55.178

🇨🇦 4.239.240.98

🇷🇴 2.57.122.150

🇷🇴 193.46.255.86

🇮🇳 160.250.205.114

🇩🇪 151.243.11.231

🇸🇻 138.97.143.27

🇺🇸 98.88.249.38

🇳🇱 81.19.216.109