JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.240.239

173.239.240.239 was found in our database!

This IP was reported 265 times. Confidence of Abuse is 100%: ?

100%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Edison, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.240.239

Whois 173.239.240.239

IP Abuse Reports for 173.239.240.239:

This IP address has been reported a total of 265 times from 106 distinct sources. 173.239.240.239 was first reported on April 15th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Teufel100	2026-08-31 22:08:10 (15 hours ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
🇬🇧 Shadymint	2026-08-31 16:03:16 (21 hours ago)	url probing from IP marked as abusive	Web App Attack
🇪🇸 librebit	2026-08-31 13:40:09 (1 day ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-08-30 06:07:07 (2 days ago)	Brute force	Brute-Force
Anonymous	2026-08-30 02:00:00 (2 days ago)	Automated web attack from 173.239.240.239 against our web server. 2 malicious requests on 2026-08-30 ... show more Automated web attack from 173.239.240.239 against our web server. 2 malicious requests on 2026-08-30 (UTC), denied with HTTP 403. Classified as: remote code execution attempt (incl. CVE-2024-4577 php-cgi). Requests targeted the bare server IP, not a host name (untargeted range scanning). Sample request: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Probed for: exposed .env files, nonexistent/suspicious paths. User-Agent: "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36". AS396356 LATITUDE-SH. All timestamps are UTC. show less	Web App Attack Hacking
Anonymous	2026-08-29 19:09:15 (2 days ago)	[Sat Aug 29 21:09:06.642892 2026] [authz_core:error] [pid 17643] [client 173.239.240.239:54155] AH01 ... show more [Sat Aug 29 21:09:06.642892 2026] [authz_core:error] [pid 17643] [client 173.239.240.239:54155] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Aug 29 21:09:09.407099 2026] [authz_core:error] [pid 17644] [client 173.239.240.239:33619] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Aug 29 21:09:14.755930 2026] [authz_core:error] [pid 17642] [client 173.239.240.239:58489] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
Anonymous	2026-08-29 16:43:02 (2 days ago)	[elearning.zebs.ch] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/conf/.env	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 14:35:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 173.239.240.239 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.240.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 10:35:34.017354 2026] [security2:error] [pid 27453:tid 27453] [client 173.239.240.239:54459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/api/.env"] [unique_id "apLuNlUg0iCnaUn2-XIqQQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 14:16:26 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 173.239.240.239 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:949110) triggered by 173.239.240.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 10:16:18.318642 2026] [security2:error] [pid 23032:tid 23032] [client 173.239.240.239:43483] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.64.150.239"] [uri "/new/.env"] [unique_id "apLpsp-dMzxruxS3mak4zgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Nerdscave Hosting	2026-08-18 02:42:33 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-18 02:21:27 (2 weeks ago)	(wordpress) Apache: Failed WordPress login from 173.239.240.239 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 173.239.240.239 (US/United States/-): 10 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 Bedios GmbH	2026-08-17 09:53:18 (2 weeks ago)	Wordpress hacking attempt	Web App Attack
🇳🇱 Site.eu	2026-08-16 18:32:50 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 ger-stg-sifi1	2026-08-16 12:19:45 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-08-16 02:01:29 (2 weeks ago)	(wordpress) Apache: Failed WordPress login from 173.239.240.239 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 173.239.240.239 (US/United States/-): 10 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 265 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.3.227.213

🇳🇱 45.148.10.141

🇺🇸 2607:f8b0:4023:100d::123

🇪🇸 195.235.65.206

🇻🇳 180.93.172.213

🇮🇩 103.59.94.62

🇨🇳 14.155.239.235

🇸🇬 8.219.177.56

🇵🇦 200.12.214.195

🇬🇧 193.163.125.144

🇺🇸 192.101.68.88

🇩🇪 167.71.56.26

🇹🇳 164.160.1.157

🇮🇩 103.46.186.85

🇺🇸 64.238.164.41

🇭🇰 34.92.227.23

🇬🇧 5.252.83.115

🇷🇴 2.57.122.209

🇬🇧 2.57.17.109

🇹🇭 203.150.107.87