JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.32.126.239

193.32.126.239 was found in our database!

This IP was reported 349 times. Confidence of Abuse is 0%: ?

ISP	31173 Services AB infrastructure in Paris, FR.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.32.126.239

Whois 193.32.126.239

IP Abuse Reports for 193.32.126.239:

This IP address has been reported a total of 349 times from 141 distinct sources. 193.32.126.239 was first reported on January 11th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-04-24 21:32:18 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.464 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -26.464 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇩🇪 FeG Deutschland	2026-03-23 16:32:24 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 jhuisi	2026-03-19 06:44:08 (3 months ago)	Mod Security Hit	Web App Attack
🇨🇿 Countryman	2026-03-19 05:52:16 (3 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 ddw	2026-03-19 05:25:23 (3 months ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇺🇸 ipblock.com	2026-03-19 05:17:00 (3 months ago)	IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-19 01:12:37 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 21:12:29.957981 2026] [security2:error] [pid 8676:tid 8676] [client 193.32.126.239:46814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teenybikini.com"] [uri "/.env"] [unique_id "abtNfcY8EeFxg9BpV6irXAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-03-19 00:29:29 (3 months ago)	(mod_security) mod_security (id:949110) triggered by 193.32.126.239 (FR/France/-): N in the last X s ... show more (mod_security) mod_security (id:949110) triggered by 193.32.126.239 (FR/France/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-19 00:22:33 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 20:22:28.325354 2026] [security2:error] [pid 885:tid 885] [client 193.32.126.239:59510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.srosa.com"] [uri "/.env"] [unique_id "abtBxOHp_ti5ABgq4cvpWAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-19 00:14:07 (3 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-03-19 00:06:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.32.126.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 20:06:06.042687 2026] [security2:error] [pid 18385:tid 18385] [client 193.32.126.239:45636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fastquizmaker.com"] [uri "/.env"] [unique_id "abs97j8GVKRVH4JU-HTiugAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-03-18 23:21:03 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.32.126.239 (FR/France/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.32.126.239 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-03-18 23:10:33 (3 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-03-18 23:03:47 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 cg-design.co.uk	2026-03-18 22:57:01 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 193.32.126.239 (FR/France/-)	SQL Injection

Showing 1 to 15 of 349 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.195.108.52

🇸🇬 152.32.218.30

🇰🇷 45.94.68.69

🇦🇺 15.135.140.75

🇨🇳 180.76.103.111

🇵🇱 176.53.159.198

🇮🇳 122.187.234.73

🇨🇳 111.85.1.113

🇺🇸 216.25.89.128

🇧🇴 181.188.173.148

🇮🇳 115.96.139.168

🇳🇱 91.92.40.204

🇺🇿 89.126.211.166

🇦🇹 87.249.133.220

🇧🇩 115.127.83.50

🇺🇸 45.45.237.8

🇸🇬 15.235.145.198

🇲🇽 189.204.230.91

🇧🇷 187.16.96.250

🇧🇷 179.48.151.196