JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.196.33

173.239.196.33 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 18%: ?

18%

ISP	Avast Software
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	avast.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.196.33

Whois 173.239.196.33

IP Abuse Reports for 173.239.196.33:

This IP address has been reported a total of 49 times from 28 distinct sources. 173.239.196.33 was first reported on March 25th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-08-08 11:15:27 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 piticu iuli	2026-08-08 04:37:31 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 173.239.196.33 (BN/Brunei/-)	SQL Injection
🇳🇱 Site.eu	2026-08-08 01:13:17 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-08-07 22:28:22 (1 month ago)	Aggressive web search of vulnerable pages: /wp-includes/js/index.php /wp-content/upgrade/item.php /b ... show more Aggressive web search of vulnerable pages: /wp-includes/js/index.php /wp-content/upgrade/item.php /buy.php /wp-content/languages/wp-conflg.php ... show less	Web App Attack
🇫🇷 dynamix	2026-08-05 12:10:35 (1 month ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-06-19 14:53:26 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 myagent.site	2026-02-27 18:29:15 (6 months ago)	Blocking for trying to access an exploit file: /themes/pridmag/	Hacking
Anonymous	2026-02-27 11:44:08 (6 months ago)	173.239.196.33 - - [27/Feb/2026:11:44:08 +0000] "GET /wp-content/hello.php HTTP/1.1" 302 453 "-" "Mo ... show more 173.239.196.33 - - [27/Feb/2026:11:44:08 +0000] "GET /wp-content/hello.php HTTP/1.1" 302 453 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-02-24 20:48:56 (6 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 173 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 173.239.196.33 (BN/Brunei/-) show less	Brute-Force
🇳🇿 Antinson	2026-02-24 20:04:06 (6 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 dynamix	2026-02-23 17:20:29 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-02-22 19:05:15 (6 months ago)	Request Overload (138)	Brute-Force Web App Attack
🇨🇭 Origon	2026-02-22 18:50:05 (6 months ago)	http-probing - IP: 173.239.196.33 - time="2026-02-22T19:50:04+01:00" level=info msg="(555f66b4f6a74 ... show more http-probing - IP: 173.239.196.33 - time="2026-02-22T19:50:04+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 173.239.196.33 (BN/206092) : 4h ban on Ip 173.239.196.33" module=db show less	Web App Attack
Anonymous	2026-02-22 18:46:26 (6 months ago)	[redacted] 173.239.196.33 - - [22/Feb/2026:19:46:21 +0100] "GET /.well-known/pki-validation/admin.ph ... show more [redacted] 173.239.196.33 - - [22/Feb/2026:19:46:21 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 173.239.196.33 - - [22/Feb/2026:19:46:21 +0100] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" [redacted] 173.239.196.33 - - [22/Feb/2026:19:46:22 +0100] "GET /wp-admin/js/index.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" [redacted] 173.239.196.33 - - [22/Feb/2026:19:46:23 +0100] "GET /wp-admin/network/network.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 173.239.196.33 - - [22 ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 17:16:40 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.33 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 12:16:32.513045 2026] [security2:error] [pid 20482:tid 20482] [client 173.239.196.33:24817] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.oceanicpier.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.oceanicpier.com"] [uri "/images/stories/themes.php"] [unique_id "aZs58Ob-yPSXbrBjYQcQcAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.157

🇺🇸 162.216.149.182

🇨🇳 116.233.97.21

🇸🇬 103.216.221.109

🇩🇪 92.246.89.86

🇮🇳 66.116.224.33

🇹🇼 34.80.42.181

🇮🇳 223.225.104.41

🇳🇱 213.177.179.109

🇺🇸 209.227.61.88

🇸🇬 207.166.168.11

🇬🇧 195.206.182.204

🇺🇸 195.184.76.199

🇩🇪 194.88.98.122

🇷🇺 193.162.143.16

🇪🇨 190.242.106.251

🇺🇸 157.238.250.118

🇺🇸 137.184.232.235

🇨🇳 121.12.157.50

🇨🇳 119.39.142.193