JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.240.249

173.239.240.249 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 100%: ?

100%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Edison, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.240.249

Whois 173.239.240.249

IP Abuse Reports for 173.239.240.249:

This IP address has been reported a total of 268 times from 100 distinct sources. 173.239.240.249 was first reported on May 22nd 2025, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Starburst SysOp Team	2026-09-01 09:39:29 (48 minutes ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)	Hacking Bad Web Bot
🇿🇦 conure.sh	2026-09-01 07:40:44 (2 hours ago)	csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s	Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 02:04:30 (8 hours ago)	(mod_security) mod_security (id:949110) triggered by 173.239.240.249 (US/United States/-): N in the ... show more (mod_security) mod_security (id:949110) triggered by 173.239.240.249 (US/United States/-): N in the last X secs show less	Web App Attack
🇺🇸 RH5	2026-09-01 00:58:41 (9 hours ago)	Restricted URL probing (/.env) (UTC 2026-09-01 00:58)	Web App Attack
🇪🇸 librebit	2026-08-31 13:40:05 (20 hours ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-08-30 06:06:57 (2 days ago)	Brute force	Brute-Force
Anonymous	2026-08-30 02:00:00 (2 days ago)	Automated web attack from 173.239.240.249 against our web server. 1 malicious request on 2026-08-30 ... show more Automated web attack from 173.239.240.249 against our web server. 1 malicious request on 2026-08-30 (UTC), denied with HTTP 403. Classified as: harvesting of exposed .env files. Requests targeted the bare server IP, not a host name (untargeted range scanning). Sample request: GET /newsite/.env Probed for: exposed .env files. User-Agent: "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36". AS396356 LATITUDE-SH. All timestamps are UTC. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-30 00:49:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 173.239.240.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.240.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 20:49:47.350699 2026] [security2:error] [pid 11223:tid 11223] [client 173.239.240.249:59997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.19"] [uri "/wp-content/.env"] [unique_id "apN-K_NUM3HH-_wZe53v5wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 21:19:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 173.239.240.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 173.239.240.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 17:19:12.297295 2026] [security2:error] [pid 8403:tid 8411] [client 173.239.240.249:59441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.132"] [uri "/new/.env"] [unique_id "apNM0HqXBkYmdFAll4KQDgAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 anotherwatcher	2026-08-29 18:18:34 (2 days ago)	bad bot	Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-08-29 14:09:13 (2 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇩🇪 maxpower	2026-08-29 14:03:41 (2 days ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 173.239.240.249 (US/United States/-): 1 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 173.239.240.249 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 173.239.240.249 - - [29/Aug/2026:16:03:35 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 11993 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" "-" host=51.89.2.98 show less	Port Scan
🇩🇪 Nerdscave Hosting	2026-08-18 02:52:34 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-18 02:26:13 (2 weeks ago)	(wordpress) Apache: Failed WordPress login from 173.239.240.249 (US/United States/-): 10 in the last ... show more (wordpress) Apache: Failed WordPress login from 173.239.240.249 (US/United States/-): 10 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-08-17 17:15:09 (2 weeks ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 183.104.220.195

🇪🇨 170.254.29.73

🇸🇬 153.75.93.57

🇨🇳 117.72.212.5

🇺🇸 99.114.206.57

🇺🇸 3.89.132.133

🇩🇪 195.182.16.23

🇳🇱 195.178.110.137

🇳🇱 193.47.62.69

🇨🇴 191.97.12.90

🇺🇸 152.32.235.206

🇻🇳 103.72.56.174

🇳🇬 102.88.137.80

🇺🇸 52.186.171.170

🇺🇸 47.251.243.238

🇰🇷 14.46.30.239

🇷🇺 5.3.154.197

🇿🇦 4.221.162.168

🇸🇬 2a04:c607:33:14:9999::145

🇺🇸 2602:80d:1008::9b