JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.24.11.139

185.24.11.139 was found in our database!

This IP was reported 223 times. Confidence of Abuse is 100%: ?

100%

ISP	Hostuj to s.r.o.
Usage Type	Content Delivery Network
ASN	AS60068
Hostname(s)	unn-185-24-11-139.datapacket.com
Domain Name	hostuj.to
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.24.11.139

Whois 185.24.11.139

IP Abuse Reports for 185.24.11.139:

This IP address has been reported a total of 223 times from 85 distinct sources. 185.24.11.139 was first reported on February 1st 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-07-13 13:29:55 (5 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 185.24.11.139 (AT/Austria/unn-185-24-11-139.da ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 185.24.11.139 (AT/Austria/unn-185-24-11-139.datapacket.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 185.24.11.139 - - [13/Jul/2026:15:29:53 +0200] "GET /wp-json/wp/v2/users/2 HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" host=www.arkon.it show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-13 13:18:48 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 185.24.11.139 (unn-185-24-11-139.datapacket.com ... show more (mod_security) mod_security (id:225170) triggered by 185.24.11.139 (unn-185-24-11-139.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 09:18:43.022184 2026] [security2:error] [pid 3118:tid 3118] [client 185.24.11.139:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bbproductionsonline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bbproductionsonline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alTls9KN9sJWr7D5R2_8UgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 juutis	2026-07-13 12:51:37 (5 days ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇫🇷 debaba	2026-07-13 12:49:46 (5 days ago)	[13/Jul/2026:12:49:45.516987 +0000] alTe6eWZPCoQ-0AxrpoI6gAAAIc 185.24.11.139 45712 127.0.0.1 7081 [ ... show more [13/Jul/2026:12:49:45.516987 +0000] alTe6eWZPCoQ-0AxrpoI6gAAAIc 185.24.11.139 45712 127.0.0.1 7081 [13/Jul/2026:12:49:45.592027 +0000] alTe6eWZPCoQ-0A ... show less	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-13 11:19:27 (5 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 185.24.11.139 (AT/Austria/unn-185-24-11-139.da ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 185.24.11.139 (AT/Austria/unn-185-24-11-139.datapacket.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 185.24.11.139 - - [13/Jul/2026:13:19:15 +0200] "GET /wp-json/wp/v2/users?who=authors&per_page=2 HTTP/2.0" 500 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "185.24.11.139" host=digiampaolosrl.it show less	Port Scan
🇪🇸 netfactotum	2026-07-13 11:18:15 (5 days ago)		Hacking Web App Attack
🇩🇪 BlueWire Hosting	2026-07-13 11:07:09 (5 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇩🇪 masterguru	2026-07-13 10:53:08 (5 days ago)	COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ... show more COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-145) show less	Hacking Web App Attack
🇩🇪 Viveronese	2026-07-13 10:29:45 (5 days ago)	HTTP vulnerability scanning	Web App Attack
🇫🇷 Tilellit.PRO	2026-07-13 09:27:50 (5 days ago)	Malicious web traffic detected by CrowdSec	Hacking
🇩🇪 sverson	2026-07-13 09:26:53 (5 days ago)	Automated report / Mutliple unauthorized attempts to access web resources	Hacking Web App Attack
🇩🇪 maxpower	2026-07-13 08:51:02 (5 days ago)	(PERMBLOCK) 185.24.11.139 (AT/Austria/unn-185-24-11-139.datapacket.com) has had more than 4 temp blo ... show more (PERMBLOCK) 185.24.11.139 (AT/Austria/unn-185-24-11-139.datapacket.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 wpadm3	2026-07-13 08:48:39 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 gadix	2026-07-13 06:42:23 (5 days ago)	[13/Jul/2026:08:42:20.794025 +0200] alSIzOnOQKVHdfQCiqpPSAAAAFU 185.24.11.139 33720 127.0.0.1 7081 [ ... show more [13/Jul/2026:08:42:20.794025 +0200] alSIzOnOQKVHdfQCiqpPSAAAAFU 185.24.11.139 33720 127.0.0.1 7081 [13/Jul/2026:08:42:20.794929 +0200] alSIzOnOQKVHdfQCiqpPSQAAAE8 185.24.11.139 33736 127.0.0.1 7081 [13/Jul/2026:08:42:20.801438 +0200] alSIzMV3jfkRW6OCOLVXiAAAABU 185.24.11.139 33796 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 Mundo Bueno	2026-07-13 05:51:03 (5 days ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/2 \| Pays: AT \| UA: Mozilla/5.0 (Win ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/2 \| Pays: AT \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Sa show less	Hacking Web App Attack

Showing 1 to 15 of 223 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.198

🇺🇸 2606:c700:1:69:e19f:cc2d:307b:70b3

🇺🇸 2606:c700:1:69:1e22:f0cd:bc1f:3440

🇸🇬 2406:ef80:2:878f:3ffd:2112:2b53:3b18

🇧🇷 205.210.31.162

🇸🇪 171.25.158.24

🇬🇧 151.217.4.34

🇮🇳 103.181.109.62

🇧🇷 45.231.254.184

🇷🇺 45.141.101.46

🇪🇨 38.224.90.36

🇨🇦 15.235.27.197

🇺🇸 2606:c700:1:69:519c:5b3a:926f:cdf4

🇸🇬 2406:ef80:2:878f:3ba9:4a17:9f51:72bb

🇸🇬 2406:ef80:2:878f:3a57:b289:6c5c:e59

🇹🇼 198.235.24.98

🇺🇸 198.211.193.58

🇺🇸 143.55.87.134

🇸🇪 81.225.142.216

🇲🇰 31.11.96.178