JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.242.20.139

196.242.20.139 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 26%: ?

26%

ISP	SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS41564
Domain Name	fibergrid.co.za
Country	🇳🇱 Netherlands
City	The Hague, South Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.242.20.139

Whois 196.242.20.139

IP Abuse Reports for 196.242.20.139:

This IP address has been reported a total of 75 times from 30 distinct sources. 196.242.20.139 was first reported on December 31st 2021, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 georgengelmann	2026-10-22 20:30:43 (11 hours ago)	Failed login attempt for georgianakable4	Brute-Force Web App Attack
🇩🇪 Lino Project	2026-10-22 15:48:42 (16 hours ago)	196.242.20.139 - - [22/Oct/2026:17:48:42 +0200] "GET /xmlrpc.php HTTP/1.1" 403 5462 "https://www.pri ... show more 196.242.20.139 - - [22/Oct/2026:17:48:42 +0200] "GET /xmlrpc.php HTTP/1.1" 403 5462 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-10-18 13:14:58 (4 days ago)	Failed login attempt for georgianakable4	Brute-Force Web App Attack
🇩🇪 Lino Project	2026-10-16 20:56:12 (6 days ago)	196.242.20.139 - - [16/Oct/2026:22:56:11 +0200] "GET /xmlrpc.php HTTP/1.1" 403 5462 "https://www.pri ... show more 196.242.20.139 - - [16/Oct/2026:22:56:11 +0200] "GET /xmlrpc.php HTTP/1.1" 403 5462 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-10-13 22:17:25 (1 week ago)	Failed login attempt for georgianakable4	Brute-Force Web App Attack
🇫🇷 dynamix	2026-10-09 06:17:37 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 georgengelmann	2026-10-06 01:46:12 (2 weeks ago)	Failed login attempt for georgianakable4	Brute-Force Web App Attack
Anonymous	2026-10-05 16:24:44 (2 weeks ago)	WMTech CAPTCHA: Abusive bot on the registration form, automated form submission without valid conten ... show more WMTech CAPTCHA: Abusive bot on the registration form, automated form submission without valid content. show less	Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-10-04 22:14:50 (2 weeks ago)	Failed login attempt for georgianakable4	Brute-Force Web App Attack
Anonymous	2026-07-17 04:49:00 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-48.196.242.20.139.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-48.196.242.20.139.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 gu-alvareza	2024-04-21 07:05:19 (2 years ago)	WordPress.xmlrpc.Pingback.DoS	DDoS Attack
🇻🇳 Xuan Can	2024-04-20 23:47:01 (2 years ago)	(mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 36 ... show more (mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 21 06:46:54.960587 2024] [security2:error] [pid 22411:tid 47469181630208] [client 196.242.20.139:40648] [client 196.242.20.139] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZiRT7oqdTnmiSZxcTkFh7wAAAI8"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-04-20 13:28:42 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 196.242.20.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 196.242.20.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 20 09:28:35.509940 2024] [security2:error] [pid 15992:tid 46918589073152] [client 196.242.20.139:39502] [client 196.242.20.139] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.mabinogion.info\|F\|2"] [data ".mystrikingly.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mabinogion.info"] [uri "/vavadacasino.mystrikingly.com"] [unique_id "ZiPDA-docr3sIM57g0fPjAAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-04-20 10:33:58 (2 years ago)	(mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 36 ... show more (mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 20 17:33:50.956531 2024] [security2:error] [pid 39327:tid 47662392252160] [client 196.242.20.139:52254] [client 196.242.20.139] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZiOaDssmDmuWSuuabg6kHgAAANI"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH
🇻🇳 Xuan Can	2024-04-18 16:15:38 (2 years ago)	(mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 36 ... show more (mod_security) mod_security (id:6) triggered by 196.242.20.139 (ZA/South Africa/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 18 23:15:32.555927 2024] [security2:error] [pid 10578:tid 47417917441792] [client 196.242.20.139:34728] [client 196.242.20.139] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZiFHJBQv1xHIW-mr5rMGpQAAAAM"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.87

🇳🇱 185.223.235.22

🇺🇸 173.255.223.49

🇮🇳 157.85.17.58

🇸🇬 150.109.16.200

🇺🇸 136.87.123.156

🇨🇭 79.127.184.131

🇧🇷 69.6.222.101

🇰🇷 58.142.131.86

🇩🇪 46.151.182.191

🇧🇪 34.156.238.134

🇮🇳 202.141.10.223

🇧🇷 201.59.91.208

🇹🇼 198.235.24.28

🇺🇸 162.216.150.99

🇦🇷 148.227.73.163

🇳🇵 111.119.39.87

🇺🇸 74.7.243.217

🇧🇷 45.164.39.253

🇩🇿 41.111.183.207