JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.196.56

173.239.196.56 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 57%: ?

57%

ISP	Avast Software
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	avast.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.196.56

Whois 173.239.196.56

IP Abuse Reports for 173.239.196.56:

This IP address has been reported a total of 110 times from 45 distinct sources. 173.239.196.56 was first reported on January 9th 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-06-29 23:41:21 (3 hours ago)	coe-7 : Trying access unauthorized files/dir=>/wp-admin/css/index.php	Hacking
🇳🇱 Site.eu	2026-06-27 14:08:15 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-06-27 13:00:39 (2 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-06-27 05:04:06 (2 days ago)	Aggressive web search of vulnerable pages: /wp-includes/js/jquery/jquery.php /function.php /wp-inclu ... show more Aggressive web search of vulnerable pages: /wp-includes/js/jquery/jquery.php /function.php /wp-includes/block-supports/autoload_classmap.php /w ... show less	Web App Attack
🇧🇬 HighWay	2026-06-25 07:51:47 (4 days ago)	173.239.196.56 - - [25/Jun/2026:07:51:32 +0000] "DELETE http://check.wn-cdn.net/?id=1/!50000UNION/ ... show more 173.239.196.56 - - [25/Jun/2026:07:51:32 +0000] "DELETE http://check.wn-cdn.net/?id=1/!50000UNION//!50000SELECT/1,2 HTTP/1.1" 403 498 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)" 173.239.196.56 - - [25/Jun/2026:07:51:41 +0000] "HEAD http://check.wn-cdn.net/ HTTP/1.1" 403 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 173.239.196.56 - - [25/Jun/2026:07:51:45 +0000] "HEAD http://check.wn-cdn.net/ HTTP/1.1" 403 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Hacking Port Scan
🇺🇸 TPI-Abuse	2026-06-24 18:16:18 (5 days ago)	(mod_security) mod_security (id:240000) triggered by 173.239.196.56 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.239.196.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 14:16:13.437641 2026] [security2:error] [pid 26292:tid 26292] [client 173.239.196.56:33235] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|alfredintelligence.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "alfredintelligence.com"] [uri "/images/stories/themes.php"] [unique_id "ajwe7ZeGURpFC4GtyVZS8QAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-23 04:46:06 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-20 12:38:55 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-06-19 08:13:26 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 Anytech	2026-06-19 02:44:59 (1 week ago)	Blocked by Conn-Monitor: Automated bot activity	Bad Web Bot Web App Attack
🇩🇪 Admin-Gito	2026-06-18 04:22:13 (1 week ago)	173.239.196.56 - - [18/Jun/2026:06:19:26 +0200] "GET /wp-includes/widgets/class-wp-widget-archives.p ... show more 173.239.196.56 - - [18/Jun/2026:06:19:26 +0200] "GET /wp-includes/widgets/class-wp-widget-archives.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 173.239.196.56 - - [18/Jun/2026:06:19:28 +0200] "GET /wp-includes/widgets/class-wp-widget-categories.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 173.239.196.56 - - [18/Jun/2026:06:19:41 +0200] "GET /wp-includes/widgets/class-wp-widget-text.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 173.239.196.56 - - [18/Jun/2026:06:19:53 +0200] "GET /wp-includes/block-supports/anchor.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 173.239.196.56 - - [18/Jun/2026:06:20:04 +0200] "GET /wp-includes/block-supports/duotone.php HTTP/1.1" 500 373 "-" "Mozi ... show less	Web App Attack
Anonymous	2026-06-13 13:40:17 (2 weeks ago)	Command Injection Exploit Sensor - HTTP (Request) - Variant 2	Hacking
🇫🇮 danskefilm.dk	2026-06-07 20:00:01 (3 weeks ago)	SQL injection	SQL Injection
Anonymous	2026-03-02 14:40:39 (3 months ago)	ALFA.TEaM.Web.Shell	Web App Attack
🇫🇷 dynamix	2026-02-23 02:32:56 (4 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.52.54

🇨🇳 183.36.25.148

🇧🇷 177.33.86.243

🇦🇷 138.118.214.152

🇺🇸 137.184.92.73

🇳🇬 102.88.111.238

🇳🇱 91.92.40.4

🇸🇮 87.119.159.243

🇺🇸 64.62.197.121

🇺🇸 64.62.197.101

🇬🇧 57.128.190.44

🇯🇵 34.85.117.131

🇺🇸 2001:470:1:332::5

🇩🇪 185.242.3.195

🇨🇳 182.44.10.68

🇧🇷 177.200.43.120

🇷🇺 172.68.10.5

🇮🇳 159.89.172.177

🇿🇦 152.110.72.153

🇨🇳 115.190.185.14