JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.73.104.73

119.73.104.73 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 62%: ?

62%

ISP	LINKdotNET Telecom Limited
Usage Type	Fixed Line ISP
ASN	AS135407
Hostname(s)	static-host119-73-104-73.link.net.pk
Domain Name	link.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.73.104.73

Whois 119.73.104.73

IP Abuse Reports for 119.73.104.73:

This IP address has been reported a total of 21 times from 14 distinct sources. 119.73.104.73 was first reported on March 11th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WeekendWeb	2026-07-02 13:25:40 (9 hours ago)	Wordpress Vunerability attack	Web App Attack
🇪🇸 masterguru	2026-07-02 11:46:57 (11 hours ago)	(xmlrpc) Failed xmlrpc access from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net.pk): ... show more (xmlrpc) Failed xmlrpc access from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net.pk): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-02 00:58:04 (22 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇪🇸 alferez	2026-07-02 00:11:21 (22 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 20:24:22 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.ne ... show more (mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 16:24:15.739747 2026] [security2:error] [pid 16781:tid 16798] [client 119.73.104.73:43549] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.73.104.73 (+1 hits since last alert)\|vancekelly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "akV3b1nWoivBIoNA3ADCsQAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 18:26:37 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.ne ... show more (mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 14:26:31.049172 2026] [security2:error] [pid 4986:tid 4986] [client 119.73.104.73:44440] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.73.104.73 (+1 hits since last alert)\|sacoriverjazz.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sacoriverjazz.org"] [uri "/xmlrpc.php"] [unique_id "akQKV1D0wPfjKxwxSgPSmQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-06-29 18:10:25 (3 days ago)	(wordpress) Failed wordpress login from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net ... show more (wordpress) Failed wordpress login from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net.pk) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-29 17:41:33 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.ne ... show more (mod_security) mod_security (id:240335) triggered by 119.73.104.73 (static-host119-73-104-73.link.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 13:41:28.330165 2026] [security2:error] [pid 13028:tid 13028] [client 119.73.104.73:45085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.73.104.73 (+1 hits since last alert)\|cassialifesci.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cassialifesci.com"] [uri "/xmlrpc.php"] [unique_id "akKuSJt0fdaxE3q4uaw8FQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-06-29 17:03:11 (3 days ago)	Failed attempt detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇲🇾 Rizzy	2026-06-26 23:22:24 (5 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-26 23:21:40 (5 days ago)	(wordpress) Failed wordpress login from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net ... show more (wordpress) Failed wordpress login from 119.73.104.73 (PK/Pakistan/static-host119-73-104-73.link.net.pk) show less	Brute-Force
Anonymous	2026-06-22 20:01:26 (1 week ago)	[redacted] 119.73.104.73 - - [22/Jun/2026:22:00:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ... show more [redacted] 119.73.104.73 - - [22/Jun/2026:22:00:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 119.73.104.73 - - [22/Jun/2026:22:00:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site79507274.com" [redacted] 119.73.104.73 - - [22/Jun/2026:22:01:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 119.73.104.73 - - [22/Jun/2026:22:01:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site96367817.com" [redacted] 119.73.104.73 - - [22/Jun/2026:22:01:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 16:32:29 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 119.73.104.73 (static-host119-73-104-73.link.ne ... show more (mod_security) mod_security (id:210730) triggered by 119.73.104.73 (static-host119-73-104-73.link.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 11:32:22.309873 2026] [security2:error] [pid 24319:tid 24319] [client 119.73.104.73:58832] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.player-care.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.com"] [uri "/midi/stream.key"] [unique_id "aZc7FnWHEITP1eMPiA632QAAAAs"], referer: http://www.player-care.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-13 07:45:19 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2025-12-16 22:25:01 (6 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.49.132.166

🇸🇪 88.80.20.49

🇱🇹 81.30.98.44

🇧🇷 201.77.116.147

🇩🇪 167.94.145.17

🇨🇳 106.75.191.112

🇵🇱 62.141.201.47

🇯🇵 43.153.185.56

🇰🇪 41.215.125.250

🇰🇷 14.63.192.228

🇹🇭 203.150.107.244

🇺🇸 191.102.149.213

🇺🇾 186.53.152.80

🇺🇸 138.99.38.114

🇩🇪 128.14.225.164

🇺🇸 74.7.227.22

🇺🇸 64.23.142.130

🇬🇧 35.203.211.133

🇺🇸 20.228.193.165

🇮🇩 163.227.52.50