JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.224.137

173.239.224.137 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 99%: ?

99%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.224.137

Whois 173.239.224.137

IP Abuse Reports for 173.239.224.137:

This IP address has been reported a total of 101 times from 60 distinct sources. 173.239.224.137 was first reported on February 22nd 2023, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Starburst SysOp Team	2026-07-30 12:44:06 (4 minutes ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-bom2-2)	Hacking Bad Web Bot
🇮🇪 AutosOnShow	2026-07-29 00:55:06 (1 day ago)	blocked for webapp attack \| path requested: / \| seen at 2026-07-29 00:54:38.774 \|	Web App Attack
🇮🇹 mgarofano80	2026-07-29 00:04:37 (1 day ago)		Brute-Force Web App Attack
🇬🇧 Apache	2026-07-28 19:51:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 173.239.224.137 (US/United States/-): 5 in the ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.137 (US/United States/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇮🇩 Burayot	2026-07-28 17:52:41 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 173.239.224.137 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 173.239.224.137 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇹🇷 neron	2026-07-27 12:19:38 (3 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 Greg Poulson	2026-07-26 19:39:48 (3 days ago)	Our website was hit by this DDOS at a rate of 7 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇩🇪 ecs.ge	2026-07-26 09:19:56 (4 days ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇺🇸 lime	2026-07-26 05:24:43 (4 days ago)	[Sun Jul 26 05:24:42.060027 2026] [php7:error] [pid 3224590] [client 173.239.224.137:21021] script ' ... show more [Sun Jul 26 05:24:42.060027 2026] [php7:error] [pid 3224590] [client 173.239.224.137:21021] script '/var/www/html/info.php' not found or unable to stat [Sun Jul 26 05:24:42.694817 2026] [php7:error] [pid 3224590] [client 173.239.224.137:21021] script '/var/www/html/info.php' not found or unable to stat show less	Hacking Web App Attack
🇩🇪 pscriptos	2026-07-26 02:11:10 (4 days ago)	{"ClientAddr":"173.239.224.137:51155","ClientHost":"173.239.224.137","ClientPort":"51155","ClientUse ... show more {"ClientAddr":"173.239.224.137:51155","ClientHost":"173.239.224.137","ClientPort":"51155","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":480642,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":480642,"RequestAddr":"www.cleveradmin.de","RequestContentSize":0,"RequestCount":2035956,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","StartLocal":"2026-07-26T04:10:49.706692826+02:00","StartUTC":"2026-07-26T02:10:49.706692826Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-26T04:10:49+02:00"} {"ClientAddr":"173.239.224.137:51155","ClientHost":"173.239.224.137","ClientPort":"51155","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":377041,"OriginCont ... show less	Brute-Force Web App Attack
🇩🇪 barbarella	2026-07-25 23:03:05 (4 days ago)	Illegal http header (POST /)	Hacking Web App Attack
🇮🇳 nadnitin	2026-07-22 07:05:42 (1 week ago)	Automated trigger via Nginx Police. Reason: IP-SCANNER. Trigger Log: 173.239.224.137 - - [22/Jul/202 ... show more Automated trigger via Nginx Police. Reason: IP-SCANNER. Trigger Log: 173.239.224.137 - - [22/Jul/2026:12:35:41 +0530] "GET /env.prod.js HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" show less	Port Scan
🇳🇱 tpjg	2026-07-22 03:42:51 (1 week ago)	Automated: 15 requests with error status in 120s window from 173.239.224.137. Evidence: /.env:404,/e ... show more Automated: 15 requests with error status in 120s window from 173.239.224.137. Evidence: /.env:404,/env.development.js:301,/env.dev.js:301,/web/api/config.js:301,/src/api/config.js:301,/src/config.js:301,/web/config.js:301,/config/config.js:301,/__tests__/test-become/.env:301,/redmine/.env:301,/.env.production:301,/.env.prod:301,/.env:301,/.env:301,/whm:404 show less	Web App Attack
🇵🇱 nfsec.pl	2026-07-22 03:25:25 (1 week ago)	173.239.224.137 - - [22/Jul/2026:03:25:24 +0000] "GET /__debug__/render_panel/?panel_id=SettingsPane ... show more 173.239.224.137 - - [22/Jul/2026:03:25:24 +0000] "GET /__debug__/render_panel/?panel_id=SettingsPanel HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 173.239.224.137 - - [22/Jul/2026:03:25:24 +0000] "GET /_profiler/phpinfo HTTP/1.1" 404 440 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0" 173.239.224.137 - - [22/Jul/2026:03:25:24 +0000] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 404 440 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0" 173.239.224.137 - - [22/Jul/2026:03:25:25 +0000] "HEAD /phpinfo.php HTTP/1.1" 404 223 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0" 173.239.224.137 - - [22/Jul/2026:03:25:25 +0000] "GET /phpinfo.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0" ... show less	Web App Attack Exploited Host
🇩🇪 neckaralb-admin.de	2026-07-21 22:54:33 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.112.99.88

🇯🇵 172.105.208.132

🇺🇸 165.154.173.157

🇮🇳 152.52.15.213

🇧🇷 131.100.242.102

🇭🇰 118.193.44.22

🇺🇸 107.150.105.153

🇲🇾 60.52.195.251

🇰🇷 59.8.111.71

🇲🇾 49.124.152.225

🇭🇰 45.207.196.123

🇨🇳 220.202.112.196

🇺🇸 209.38.130.8

🇬🇧 198.244.226.238

🇹🇷 188.132.196.44

🇵🇪 161.132.54.218

🇩🇪 151.243.11.231

🇨🇳 123.245.84.70

🇻🇳 116.110.8.232

🇮🇳 103.82.210.181