JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.196.107

173.239.196.107 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 46%: ?

46%

ISP	Avast Software
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	avast.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.196.107

Whois 173.239.196.107

IP Abuse Reports for 173.239.196.107:

This IP address has been reported a total of 69 times from 30 distinct sources. 173.239.196.107 was first reported on March 25th 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-02 18:24:47 (20 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 15:04:42 (23 hours ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 11:04:35.146205 2026] [security2:error] [pid 21788:tid 21788] [client 173.239.196.107:43423] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|beeswaxnews.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "beeswaxnews.com"] [uri "/images/stories/themes.php"] [unique_id "akZ-A1z6mNQlpvmPt5FlGwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-02 09:46:55 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 masterguru	2026-06-30 02:04:28 (3 days ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇯🇵 beon	2026-06-29 16:08:23 (3 days ago)	[DateTime=>2026-06-29T16:08:23Z to 2026-06-29T16:09:08Z (UTC)] , [HoneyPot_Hits=>253 times] , [Honey ... show more [DateTime=>2026-06-29T16:08:23Z to 2026-06-29T16:09:08Z (UTC)] , [HoneyPot_Hits=>253 times] , [HoneyPots=>/.trash7206/index.php, /storage/framework/views/core.php, /wp-content/plugins/so-pinyin-slugs/inc/main_json.php, /wp-includes/blocks/latest-comments/template-loader.php, /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php, /wp-content/wpvivid_uploads/wp-conflg.php and others] , [404targets=>/update/, /modules/mod_simplefileuploadv1.3/elements/, /js/, /.well-known/pki-validation/, /autoload_classmap/, /templates/beez3/ and others] , [total_Hits=>285 times] , [hit_per_second=>6.33] , [Keyword=>WordPress, file manager scripts, .well-known, PHP web shells] show less	Bad Web Bot Web App Attack Hacking
🇳🇱 Site.eu	2026-06-29 09:53:21 (4 days ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-28 17:46:38 (4 days ago)	Aggressive web search of vulnerable pages: /update/ /themes/zMousse/ /wp-content/plugins/ubh/ /wp-co ... show more Aggressive web search of vulnerable pages: /update/ /themes/zMousse/ /wp-content/plugins/ubh/ /wp-content/plugins/seoplugins/ /wp-content/theme ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 19:19:13 (5 days ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:19:09.004625 2026] [security2:error] [pid 7890:tid 7890] [client 173.239.196.107:33371] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|genevainvestors.internetnameregistration.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "genevainvestors.internetnameregistration.com"] [uri "/images/stories/themes.php"] [unique_id "akAiLSDZARXAU-fC3V20rwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-25 14:48:43 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 myagent.site	2026-03-10 19:10:17 (3 months ago)	Blocking for trying to access an exploit file: //xmlrpc.php?rsd	Hacking
Anonymous	2026-03-02 14:40:39 (4 months ago)	ALFA.TEaM.Web.Shell	Web App Attack
🇳🇿 Antinson	2026-02-25 07:07:31 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-23 15:29:45 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 10:29:40.648649 2026] [security2:error] [pid 7613:tid 7613] [client 173.239.196.107:52131] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|explorediablo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "explorediablo.com"] [uri "/images/stories/themes.php"] [unique_id "aZxyZDjGfrWHU3CmyRDVaAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-02-23 12:56:28 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 08:46:51 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 03:46:45.390561 2026] [security2:error] [pid 23029:tid 23029] [client 173.239.196.107:51525] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|azpinklimos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "azpinklimos.com"] [uri "/images/stories/themes.php"] [unique_id "aZrCdbvGrpmA1v51fLU18wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇦 217.71.55.184

🇵🇱 185.241.208.23

🇺🇸 162.216.149.240

🇸🇪 158.174.210.161

🇨🇳 122.224.205.42

🇭🇰 118.26.36.18

🇺🇸 45.33.12.122

🇻🇳 14.225.253.26

🇸🇾 5.0.65.255

🇷🇴 2.57.122.168

🇵🇸 213.6.78.34

🇳🇱 195.178.110.227

🇺🇸 192.81.218.246

🇨🇳 115.56.238.174

🇹🇷 94.154.43.56

🇳🇱 94.102.49.193

🇮🇳 49.47.141.123

🇮🇳 49.43.88.39

🇮🇳 49.43.35.237

🇩🇪 47.91.89.133