JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.239.176.242

193.239.176.242 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 23%: ?

23%

ISP	H Development & Management SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48955
Domain Name	ip.ro
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.239.176.242

Whois 193.239.176.242

IP Abuse Reports for 193.239.176.242:

This IP address has been reported a total of 15 times from 9 distinct sources. 193.239.176.242 was first reported on June 22nd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-23 11:28:03 (3 days ago)	LH-Watcher: FAKE_ID [Fake Googlebot]	Bad Web Bot
🇮🇪 AutosOnShow	2026-06-22 02:39:05 (4 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-22 02:38:16.767 \|	Web App Attack
🇮🇪 AutosOnShow	2026-06-21 19:11:05 (5 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-21 19:10:29.964 \|	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 20:03:18 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 193.239.176.242 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 193.239.176.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:03:09.734167 2026] [security2:error] [pid 4235:tid 4235] [client 193.239.176.242:43049] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kingstoneproperties.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "ajGr_cVPVo93Oues0kfaRAAAAAo"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-05-14 22:54:13 (1 month ago)	193.239.176.242 - - [14/May/2026:17:54:12 -0500] "GET /.env HTTP/1.1" 200 871 "-" "Mozilla/5.0 (Wind ... show more 193.239.176.242 - - [14/May/2026:17:54:12 -0500] "GET /.env HTTP/1.1" 200 871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇮🇪 Jim Keir	2026-04-23 05:06:05 (2 months ago)	2026-04-23 05:06:04 193.239.176.242 File scanning, blocking 193.239.176.242 for 5 minutes	Web App Attack
🇺🇸 dpinse	2025-11-02 05:10:44 (7 months ago)	teler detected Directory Bruteforce against resource /.env from 193.239.176.242	Bad Web Bot
🇺🇸 FireballDWF	2025-08-25 00:50:07 (10 months ago)	404 NOT FOUND	Web App Attack
🇺🇸 FireballDWF	2025-08-20 08:05:05 (10 months ago)	404 NOT FOUND	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-19 21:52:39 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 7.1 hours, ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 7.1 hours, Timestamp deviates by 4.5 hours, ... and more (+7 more). Activity: 668 requests to 3 URLs. Period: 2025-08-04 16:33:42 - 2025-08-18 09:01:00 (America/Bogota). Origin: RO. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇮🇪 Jim Keir	2025-08-16 21:21:43 (10 months ago)	2025-08-16 21:21:43 193.239.176.242 File scanning, blocking 193.239.176.242 for 5 minutes	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-04 21:45:38 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Exposure of environment file (.env), Timestamp deviates by 1.8 hours. Activity: 119 requests to 2 URLs. Period: 2025-08-04 16:33:42 - 2025-08-04 16:33:42 (America/Bogota). Origin: RO. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇺🇸 FireballDWF	2025-08-01 08:45:14 (10 months ago)	404 NOT FOUND	Web App Attack
🇺🇸 FireballDWF	2025-07-26 17:00:15 (11 months ago)	404 NOT FOUND	Web App Attack
🇸🇬 Charles	2025-06-22 13:24:31 (1 year ago)	193.239.176.242 - - [22/Jun/2025:21:24:28 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Wind ... show more 193.239.176.242 - - [22/Jun/2025:21:24:28 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.208

🇰🇷 121.132.27.238

🇨🇳 222.214.141.12

🇧🇷 205.210.31.141

🇧🇩 203.31.169.91

🇲🇾 149.118.135.252

🇩🇪 130.12.180.77

🇨🇳 120.82.84.105

🇨🇳 115.190.54.120

🇳🇱 91.92.40.202

🇳🇱 91.92.40.8

🇱🇹 62.60.130.219

🇨🇳 60.16.203.77

🇬🇧 54.38.147.109

🇮🇩 36.64.131.68

🇲🇾 180.74.218.107

🇧🇷 177.137.102.2

🇺🇸 147.185.132.26

🇧🇷 143.137.156.78

🇰🇷 59.24.133.197