JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.244.55.113

173.244.55.113 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS262287
Domain Name	vpnconsumer.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.244.55.113

Whois 173.244.55.113

IP Abuse Reports for 173.244.55.113:

This IP address has been reported a total of 80 times from 42 distinct sources. 173.244.55.113 was first reported on March 28th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-02-10 04:52:38 (4 months ago)	(mod_security) mod_security (id:20000010) triggered by 173.244.55.113 (UY/Uruguay/-): 5 in the last ... show more (mod_security) mod_security (id:20000010) triggered by 173.244.55.113 (UY/Uruguay/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-02-07 18:51:34 (4 months ago)	Blocking for trying to access an exploit file: /manager.php	Hacking
🇺🇸 TPI-Abuse	2026-02-07 00:15:51 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 19:15:43.251526 2026] [security2:error] [pid 1185899:tid 1185916] [client 173.244.55.113:20087] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|globalacademyoffinanceandmanagement.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "globalacademyoffinanceandmanagement.com"] [uri "/images/stories/themes.php"] [unique_id "aYaELy-acvZBGP-uxSRt6QAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-02-07 00:05:38 (4 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-02-05 21:22:23 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 173.244.55.113 (UY/Uruguay/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-02-03 06:16:07 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 01:16:02.390818 2026] [security2:error] [pid 24110:tid 24110] [client 173.244.55.113:25923] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.bespoke-ss.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.bespoke-ss.com"] [uri "/images/stories/themes.php"] [unique_id "aYGSopQK6Eyjj5Q35A0lyQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-01-06 04:48:01 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /wp-admin/setup-config.php (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇦🇺 QT	2026-01-05 13:43:58 (5 months ago)	Website hack attempted at 2026-01-05 23:43:57 +1000	Web App Attack
🇳🇱 Brict IT	2026-01-05 13:35:21 (5 months ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 12:43:53 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 07:43:48.588639 2026] [security2:error] [pid 4135:tid 4135] [client 173.244.55.113:62453] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.reserve.sanjuangrange.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.reserve.sanjuangrange.org"] [uri "/images/stories/themes.php"] [unique_id "aVuyBMa5tdCanvGSgq9X7AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 10:25:02 (5 months ago)	suspicious request in access.log	Web App Attack
🇳🇱 Site.eu	2026-01-05 08:01:08 (5 months ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-01-05 07:08:06 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 173.244.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 02:08:01.503746 2026] [security2:error] [pid 21861:tid 21861] [client 173.244.55.113:30197] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thebronsons.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thebronsons.com"] [uri "/images/stories/themes.php"] [unique_id "aVtjUdZ4WOFVSiaJBsHVRgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-01-05 06:06:37 (5 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 kosada.com	2026-01-05 04:57:03 (5 months ago)	Web vulnerability probing: /mah/function.php	Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.88.220.59

🇧🇷 189.80.73.166

🇳🇱 160.119.76.31

🇺🇸 153.66.28.132

🇺🇸 145.132.100.186

🇳🇱 45.156.128.166

🇺🇸 34.152.126.148

🇺🇸 2607:f8b0:4001:c34::126

🇨🇳 222.189.98.96

🇨🇳 221.228.203.3

🇬🇧 206.189.19.232

🇨🇷 190.112.222.28

🇸🇬 168.144.41.150

🇲🇾 118.100.233.198

🇮🇩 103.154.231.122

🇺🇸 64.225.112.39

🇸🇪 31.59.160.12

🇨🇦 20.151.217.82

🇰🇷 221.154.110.217

🇳🇱 217.60.195.168