JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

173.239.196.45

Neutral Activity

Abuse Confidence Score

0% Low Risk

49 reports

26 reporters · latest 2 months ago

ISP: Avast Software
Usage Type: Data Center/Web Hosting/Transit
ASN: AS206092
Domain Name: avast.com
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

173.239.196.45 has been reported 49 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

49 from 26 distinct reporters

First reported

November 12th 2023

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-08-10 19:49:34 UTC · (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 15:01:29 UTC · (3 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 11:01:20.354825 2026] [security2:error] [pid 24639:tid 24639] [client 173.239.196.45:52295] ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 11:01:20.354825 2026] [security2:error] [pid 24639:tid 24639] [client 173.239.196.45:52295] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|e2home-ec.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "e2home-ec.com"] [uri "/images/stories/themes.php"] [unique_id "anXzQCYwAeCh18-HOxJJfgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-07 12:04:14 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Antinson	2026-08-07 08:29:18 UTC · (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-07 04:25:23 UTC · (3 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 00:25:18.118798 2026] [security2:error] [pid 3956297:tid 3956297] [client 173.239.196.45:42 ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 00:25:18.118798 2026] [security2:error] [pid 3956297:tid 3956297] [client 173.239.196.45:42511] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|visage-nico.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "visage-nico.com"] [uri "/images/stories/themes.php"] [unique_id "anVeLtT8vbt2BEkmzHu_WwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 03:39:39 UTC · (3 months ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 23:39:31.566489 2026] [security2:error] [pid 1885050:tid 1885108] [client 173.239.196.45:44 ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.45 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 23:39:31.566489 2026] [security2:error] [pid 1885050:tid 1885108] [client 173.239.196.45:44517] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.a.my-drug-store.kylight.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "a.my-drug-store.kylight.com"] [uri "/images/stories/themes.php"] [unique_id "anVTcxXDHT57x9oocm79-wAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-06 15:33:11 UTC · (3 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇫🇷 Octopuce	2026-08-05 08:37:09 UTC · (3 months ago)	Aggressive web search of vulnerable pages: /update/ /wp-content/ /wp-admin/maint/ /themes/zMousse/ /wp-content/plugins/ubh/ /wp-admin/images/ / ...	Web App Attack
🇫🇷 dynamix	2026-08-05 01:02:04 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-23 10:18:51 UTC · (8 months ago)	[redacted] 173.239.196.45 - - [23/Feb/2026:11:18:47 +0100] "GET /admin/function.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" [redacted] 173.239.1 ... show more [redacted] 173.239.196.45 - - [23/Feb/2026:11:18:47 +0100] "GET /admin/function.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" [redacted] 173.239.196.45 - - [23/Feb/2026:11:18:47 +0100] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" [redacted] 173.239.196.45 - - [23/Feb/2026:11:18:47 +0100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" [redacted] 173.239.196.45 - - [23/Feb/2026:11:18:49 +0100] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 173.239.196.45 - - [23/Feb/20 ... show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-02-21 06:35:25 UTC · (8 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-02-21 03:01:43 UTC · (8 months ago)	Web vulnerability probing: /blog/wp-includes/	Web App Attack
🇬🇧 consul.to	2026-02-20 11:12:21 UTC · (8 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-02-20 08:53:18 UTC · (8 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 geot	2026-02-18 12:55:23 UTC · (8 months ago)	WordPress scanning bot	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 201.239.61.76

🇯🇵 160.251.44.94

🇺🇸 158.94.187.120

🇨🇦 99.231.173.16

🇸🇰 46.229.233.132

🇧🇷 45.238.2.87

🇲🇲 45.41.104.86

🇨🇳 39.107.136.130

🇧🇪 35.210.62.153

🇺🇸 31.134.1.161

🇵🇱 162.158.103.191

🇺🇸 136.144.19.130

🇺🇸 109.105.210.83

🇫🇮 104.245.243.235

🇷🇺 212.192.158.68

🇧🇪 207.175.54.132

🇺🇸 199.165.159.80

🇻🇪 190.89.31.230

🇸🇬 101.47.134.75

🇧🇪 35.210.43.143