JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.224.180

173.239.224.180

Recent Activity

100 reports found in our database

57% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

LogicWeb Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396356

Domain Name

logicweb.com

Country

🇺🇸 United States of America

City

Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 173.239.224.180:

This IP address has been reported a total of 100 times from 68 distinct sources. 173.239.224.180 was first reported on September 14th 2023, and the most recent report was 12 hours ago. In the last 60 days, the top reporter locations were: Canada with 5 reports; Germany with 5 reports; United States of America with 5 reports. The most common categories in these recent reports were: Web App Attack 19 times; Brute-Force 9 times; Hacking 3 times; Bad Web Bot 2 times; Port Scan 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 neckaralb-admin.de	2026-09-15 08:50:01 (12 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-09-14 11:57:54 (1 day ago)	173.239.224.180 - - [14/Sep/2026:13:57:54 +0200] "GET / HTTP/1.1" 301 169 "-" "Go-http-client/1.1"	Bad Web Bot
🇧🇪 madeit	2026-09-14 11:26:41 (1 day ago)		Web App Attack
🇺🇸 fazar	2026-09-14 07:36:25 (1 day ago)	crowdsecurity/http-admin-interface-probing on node: us01	Web App Attack Hacking
🇺🇸 dot.mg	2026-09-14 03:50:03 (1 day ago)	Scan of vulnerable files	Web App Attack
🇵🇱 gandaflux	2026-09-14 02:24:50 (1 day ago)	173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:47 +0200] "GET /bless.php HTTP/1.1" 404 158 " ... show more 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:47 +0200] "GET /bless.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:47 +0200] "GET /wp-content/goods.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:47 +0200] "GET /blurbs.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:48 +0200] "GET /wp-admin/css/goods.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:48 +0200] "GET /abcd.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:48 +0200] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:48 +0200] "GET /dex.php HTTP/1.1" 404 158 "-" "Go-http-client/1.1" 173.239.224.180 [redacted-domain] - [14/Sep/2026:04:24:48 +0200] "G show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-09-14 02:15:33 (1 day ago)	(mod_security) mod_security (id:1000001) triggered by 173.239.224.180 (US/United States/Texas/Dallas ... show more (mod_security) mod_security (id:1000001) triggered by 173.239.224.180 (US/United States/Texas/Dallas/-/[AS396356 Latitude.sh]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Sep 14 05:15:31.840409 2026] [security2:error] [pid 309628:tid 309715] [client 173.239.224.180:48319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/000.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /000.php"] [severity "CRITICAL"] [tag "security"] [hostname "pankoskal.gr"] [uri "/000.php"] [unique_id "aqdYw-xCVBfr5dN5Rgb4xQAAAME"] show less	Port Scan
🇦🇺 paulshipley.com.au	2026-09-14 00:14:45 (1 day ago)	angleseaarthouse.com.au:443 173.239.224.180 - - [14/Sep/2026:10:14:42 +1000] "GET /file.php HTTP/1.1 ... show more angleseaarthouse.com.au:443 173.239.224.180 - - [14/Sep/2026:10:14:42 +1000] "GET /file.php HTTP/1.1" 404 76203 "http://angleseaarthouse.com.au/file.php" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 nyt	2026-08-17 19:14:52 (4 weeks ago)	WP Author Enumeration, WP User Enumeration	Web App Attack
🇺🇸 nyt	2026-08-03 20:41:08 (1 month ago)	WP Author Enumeration, WP User Enumeration	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-08-01 05:58:57 (1 month ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.239.224.180 - - [01/Aug/202 ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.239.224.180 - - [01/Aug/2026:05:58:48 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 173.239.224.180 - - [01/Aug/2026:05:58:57 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "https://www.google.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-30 17:33:35 (1 month ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-07-30 12:53:12 (1 month ago)	Jul 30 08:52:58 www4 WPAudit[3703]: 173.239.224.180 terratherma.com "Mozilla/5.0 (X11; Ubuntu; Linux ... show more Jul 30 08:52:58 www4 WPAudit[3703]: 173.239.224.180 terratherma.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" [email protected]:!r007p455w0rd! FAIL Jul 30 08:53:01 www4 WPAudit[3705]: 173.239.224.180 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" [email protected]:rastap455w0rd FAIL Jul 30 08:53:04 www4 WPAudit[3703]: 173.239.224.180 terratherma.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" [email protected]:r007p455w0rd__ FAIL Jul 30 08:53:07 www4 WPAudit[3705]: 173.239.224.180 terratherma.com "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/120.0.1" [email protected]:63a9f0ea7 FAIL Jul 30 08:53:11 www4 WPAudit[3703]: 173.239.224.180 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Fir ... show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-30 12:31:07 (1 month ago)	(wordpress) Apache: Failed WordPress login from 173.239.224.180 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 173.239.224.180 (US/United States/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 dynamix	2026-07-29 12:29:54 (1 month ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 109.123.237.213

🇨🇳 58.19.82.63

🇦🇺 35.189.6.23

🇬🇧 2a06:4882:1000::4

🇦🇷 200.59.88.8

🇷🇴 193.46.255.86

🇷🇺 178.65.189.83

🇺🇸 137.184.102.191

🇧🇩 103.189.5.190

🇩🇪 94.26.106.201

🇮🇷 85.133.193.72

🇮🇱 79.177.133.101

🇱🇹 62.60.130.242

🇵🇰 39.37.225.168

🇨🇱 34.176.30.26

🇺🇸 20.98.155.166

🇺🇸 20.14.75.205

🇨🇳 14.153.241.163

🇨🇳 218.78.132.164

🇺🇸 144.172.93.238