JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.224.141

173.239.224.141 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 65%: ?

65%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.224.141

Whois 173.239.224.141

IP Abuse Reports for 173.239.224.141:

This IP address has been reported a total of 85 times from 51 distinct sources. 173.239.224.141 was first reported on February 21st 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-11 03:13:28 (1 day ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 173.239.224.141 - - [09/Jul/2026:11:58:37 -0300] "GET / ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 173.239.224.141 - - [09/Jul/2026:11:58:37 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇨🇴 ingentar	2026-07-10 14:30:05 (2 days ago)	2026-07-10T09:29:41.021916-05:00 web wordpress(cemcarga.com.co)[1047244]: Authentication attempt for ... show more 2026-07-10T09:29:41.021916-05:00 web wordpress(cemcarga.com.co)[1047244]: Authentication attempt for unknown user rouptin from 173.239.224.141 2026-07-10T09:29:45.842922-05:00 web wordpress(cemcarga.com.co)[1047244]: Authentication attempt for unknown user support_access from 173.239.224.141 2026-07-10T09:29:49.984878-05:00 web wordpress(cemcarga.com.co)[1047244]: Authentication attempt for unknown user [email protected] from 173.239.224.141 ... show less	Web App Attack Brute-Force
🇺🇸 slay3r9903	2026-07-10 08:41:57 (2 days ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
Anonymous	2026-07-10 02:05:55 (2 days ago)	[ns31.kdns.gr] httpd-login-spray-net: sites=www.bedeniti.gr; logs=/var/log/httpd/domains/bedeniti.gr ... show more [ns31.kdns.gr] httpd-login-spray-net: sites=www.bedeniti.gr; logs=/var/log/httpd/domains/bedeniti.gr.log; samples=network=173.239.224.0/24 \| distinct_ips=4 \| /wp-login.php show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-10 00:42:53 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇧🇷 Peregrine	2026-07-09 14:58:48 (3 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 173.239.224.141 - - [09/Jul/2026:11:58:37 -0300] "GET / ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 173.239.224.141 - - [09/Jul/2026:11:58:37 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 DrLex0	2026-07-09 09:20:54 (3 days ago)	Distributed attack from multiple IPs in shitty 173.239.224.0/24 range, poking for various exploits ... show more Distributed attack from multiple IPs in shitty 173.239.224.0/24 range, poking for various exploits 173.239.224.141 443 - [09/Jul/2026:09:20:15 +0000] "POST / HTTP/1.1" 400 5428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.239.224.141 443 - [09/Jul/2026:09:20:46 +0000] "GET /.env.prod HTTP/1.1" 404 7524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 173.239.224.141 443 - [09/Jul/2026:09:20:54 +0000] "GET /redmine/.env HTTP/1.1" 404 7524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-07 02:19:20 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 Jason Howell	2026-07-04 09:01:17 (1 week ago)	173.239.224.141 - - [04/Jul/2026:04:01:15 -0500] "POST /wp-login.php HTTP/1.1" 200 6093 "https://pon ... show more 173.239.224.141 - - [04/Jul/2026:04:01:15 -0500] "POST /wp-login.php HTTP/1.1" 200 6093 "https://ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 173.239.224.141 - - [04/Jul/2026:04:01:15 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 496 "https://ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 173.239.224.141 - - [04/Jul/2026:04:01:16 -0500] "GET /wp-admin/profile.php HTTP/1.1" 302 498 "https://ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 173.239.224.141 - - [04/Jul/2026:04:01:16 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 495 "https://ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit ... show less	Web App Attack
🇩🇪 Bedios GmbH	2026-06-30 06:03:51 (1 week ago)	Wordpress hacking attempt	Web App Attack
🇨🇦 KIsmay	2026-06-22 12:57:07 (2 weeks ago)	Jun 22 04:24:54 www4 WPAudit[2789115]: 173.239.224.141 lemoncreekcampground.ca "Mozilla/5.0" sbd-adm ... show more Jun 22 04:24:54 www4 WPAudit[2789115]: 173.239.224.141 lemoncreekcampground.ca "Mozilla/5.0" sbd-admin:sbd-admin123 FAIL Jun 22 06:38:20 www4 WPAudit[2798422]: 173.239.224.141 www.vhsport.ca "Mozilla/5.0" sbd-admin:sbd-adminsbd-admin FAIL Jun 22 08:29:23 www4 WPAudit[2805888]: 173.239.224.141 lemoncreekcampground.ca "Mozilla/5.0" lemoncreek:pass1234 FAIL Jun 22 08:29:54 www4 WPAudit[2805882]: 173.239.224.141 imaginesalmon.com "Mozilla/5.0" imagine:pass1234 FAIL Jun 22 08:57:06 www4 WPAudit[2807619]: 173.239.224.141 imaginesalmon.com "Mozilla/5.0" imagine:qwerty FAIL ... show less	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-06-18 16:52:23 (3 weeks ago)	Jun 18 09:00:27 www4 WPAudit[2371861]: 173.239.224.141 ouchiaccounting.ca "Mozilla/5.0" sbd-admin:sb ... show more Jun 18 09:00:27 www4 WPAudit[2371861]: 173.239.224.141 ouchiaccounting.ca "Mozilla/5.0" sbd-admin:sbd-admin2024 FAIL Jun 18 09:00:27 www4 WPAudit[2371859]: 173.239.224.141 ouchiaccounting.ca "Mozilla/5.0" bwouchi:bwouchi2024 FAIL Jun 18 09:55:08 www4 WPAudit[2375810]: 173.239.224.141 www.amandasrestaurant.ca "Mozilla/5.0" gina:gina@2025 FAIL Jun 18 12:48:35 www4 WPAudit[2389756]: 173.239.224.141 www.amandasrestaurant.ca "Mozilla/5.0" gina:qwerty FAIL Jun 18 12:52:22 www4 WPAudit[2389950]: 173.239.224.141 imaginesalmon.com "Mozilla/5.0" se7enoaks:qwerty FAIL ... show less	Brute-Force Web App Attack
🇬🇷 setupgr	2026-06-17 10:18:23 (3 weeks ago)	(mod_security) mod_security (id:900001) triggered by 173.239.224.141 (US/United States/Texas/Dallas/ ... show more (mod_security) mod_security (id:900001) triggered by 173.239.224.141 (US/United States/Texas/Dallas/-/[AS396356 LATITUDE-SH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 13:18:22.402567 2026] [security2:error] [pid 2777555:tid 2777600] [client 173.239.224.141:31241] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "doityourself.gr"] [uri "/wp-login.php"] [unique_id "ajJ0biujf2PT-9Py5KN9qwAAAJI"] show less	Port Scan
🇫🇷 SpaceHost-Server	2026-06-14 00:31:23 (4 weeks ago)	173.239.224.141 - - [14/Jun/2026:02:31:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12 ... show more 173.239.224.141 - - [14/Jun/2026:02:31:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.5; WordPress/6.4; http://site27389988.com" 173.239.224.141 - - [14/Jun/2026:02:31:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 173.239.224.141 - - [14/Jun/2026:02:31:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-11 01:05:47 (1 month ago)	Login Too Frequent (7)	Brute-Force Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.42.101.102

🇹🇭 183.88.226.97

🇺🇸 143.110.128.10

🇨🇳 103.219.32.239

🇺🇸 47.251.105.167

🇹🇹 186.96.213.147

🇵🇰 119.73.8.217

🇫🇷 90.35.200.150

🇷🇴 79.119.118.11

🇭🇰 8.217.193.233

🇺🇸 205.210.31.82

🇩🇪 193.124.20.233

🇧🇷 179.42.159.233

🇦🇷 143.202.145.6

🇨🇳 125.120.84.21

🇺🇸 20.40.250.17

🇳🇱 176.65.149.30

🇸🇪 158.174.211.17

🇲🇾 49.124.148.206

🇷🇴 2.57.121.112