JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.130.2.131

43.130.2.131 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.130.2.131

Whois 43.130.2.131

IP Abuse Reports for 43.130.2.131:

This IP address has been reported a total of 22 times from 21 distinct sources. 43.130.2.131 was first reported on July 3rd 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-13 09:08:08 (2 hours ago)	http-probing - IP: 43.130.2.131 - time="2026-06-13T11:08:07+02:00" level=info msg="(555f66b4f6a7455 ... show more http-probing - IP: 43.130.2.131 - time="2026-06-13T11:08:07+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 43.130.2.131 (US/132203) : 4h ban on Ip 43.130.2.131" module=db show less	Web App Attack
🇳🇱 lns.bz	2026-06-13 08:39:49 (3 hours ago)	Too many 404 requests [DOOZ]	Web App Attack
🇬🇧 Apache	2026-06-12 19:55:37 (15 hours ago)	(mod_security) mod_security (id:210410) triggered by 43.130.2.131 (US/United States/-): 5 in the las ... show more (mod_security) mod_security (id:210410) triggered by 43.130.2.131 (US/United States/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇳🇴 jad@	2026-06-12 15:03:24 (20 hours ago)	ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Obse ... show more ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 14 hits. show less	Brute-Force Web App Attack
🇵🇱 Roper123	2026-06-12 13:01:38 (22 hours ago)	Web app exploits	Web App Attack
🇮🇹 eliosbrocchi	2026-06-12 12:19:22 (23 hours ago)	2026-06-12T14:19:21.032348+02:00 thunderchild wordpress(www.crislio.com)[1886445]: Blocked user enum ... show more 2026-06-12T14:19:21.032348+02:00 thunderchild wordpress(www.crislio.com)[1886445]: Blocked user enumeration attempt from 43.130.2.131 ... show less	VPN IP
Anonymous	2026-06-12 11:24:16 (1 day ago)	43.130.2.131 - - [12/Jun/2026:11:24:16 +0000] "GET /landing-owlbee/uk/wp-includes/ID3/license.txt HT ... show more 43.130.2.131 - - [12/Jun/2026:11:24:16 +0000] "GET /landing-owlbee/uk/wp-includes/ID3/license.txt HTTP/1.1" 404 7821 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 11:08:30 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 43.130.2.131 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 43.130.2.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:08:21.769466 2026] [security2:error] [pid 2375:tid 2375] [client 43.130.2.131:58223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|oweng.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oweng.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aivopVyfMTG3BanBa-DP2AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-06-12 06:56:40 (1 day ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 RLDD	2026-06-12 06:36:40 (1 day ago)	WP probing for vulnerabilities -ove	Web App Attack
🇪🇸 yvoictra	2026-06-12 04:33:18 (1 day ago)	43.130.2.131 - - [12/Jun/2026:06:33:15 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 564 "- ... show more 43.130.2.131 - - [12/Jun/2026:06:33:15 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.130.2.131 - - [12/Jun/2026:06:33:16 +0200] "GET /feed/ HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.130.2.131 - - [12/Jun/2026:06:33:16 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.130.2.131 - - [12/Jun/2026:06:33:17 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.130.2.131 - - [12/Jun/2026:06:33:17 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show less	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-06-12 04:32:39 (1 day ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-06-12 02:32:10 (1 day ago)	Bad_requests	Bad Web Bot
🇳🇱 Savvii	2026-06-12 01:25:55 (1 day ago)	10 attempts against mh_ha-misc-ban on taro	Brute-Force Web App Attack
🇭🇰 Harold Wong	2026-06-12 01:04:27 (1 day ago)	$f2bV_matches	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.189.99.235

🇲🇽 187.191.48.22

🇵🇱 185.198.37.211

🇫🇷 185.194.178.104

🇩🇪 69.5.169.242

🇫🇷 51.68.111.199

🇺🇸 38.43.93.237

🇨🇦 20.220.150.55

🇰🇷 221.161.235.168

🇨🇦 216.26.242.209

🇨🇦 216.26.241.162

🇩🇪 212.132.120.41

🇫🇷 185.194.178.82

🇫🇷 185.194.178.62

🇫🇷 185.194.178.61

🇫🇷 170.168.241.177

🇩🇪 162.55.27.181

🇻🇳 157.66.80.97

🇭🇰 118.193.43.141

🇨🇳 112.64.70.29