JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.14.147.231

72.14.147.231 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 100%: ?

100%

ISP	Lucid Growth LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	lucidgrowth.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.14.147.231

Whois 72.14.147.231

IP Abuse Reports for 72.14.147.231:

This IP address has been reported a total of 103 times from 73 distinct sources. 72.14.147.231 was first reported on May 26th 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-05 11:37:50 (10 minutes ago)	06/05/2026-18:37:49.708822 [Drop] [] [1:43238:4] Suricata SERVER-WEBAPP Imatix Xitami web server ... show more 06/05/2026-18:37:49.708822 [Drop] [] [1:43238:4] Suricata SERVER-WEBAPP Imatix Xitami web server head processing denial of service attempt [**] [Classification: Attempted Denial of Service] [Priority: 3] {TCP} 72.14.147.231:43182 -> 103.166.156.58:80 ... show less	Email Spam Hacking
🇫🇮 as211431.net	2026-06-05 11:18:47 (29 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.production UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 agenciahypelab.com.br	2026-06-05 11:15:17 (33 minutes ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇸🇬 serverutama	2026-06-05 11:03:05 (45 minutes ago)	Nginx scanner: 72.14.147.231 - - [05/Jun/2026:17:37:34 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozill ... show more Nginx scanner: 72.14.147.231 - - [05/Jun/2026:17:37:34 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "-" 72.14.147.231 - - [05/Jun/2026:17:37:35 +0700] "GET /api/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" "-" show less	Web App Attack Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-06-05 10:46:05 (1 hour ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Ba-Yu	2026-06-04 15:21:54 (20 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-04 14:42:41 (21 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 tmiland	2026-06-04 12:27:08 (23 hours ago)	(nginx_404) Dot directory Honeypot Trap 72.14.147.231 (US/United States/-): 2 in the last 3600 secs; ... show more (nginx_404) Dot directory Honeypot Trap 72.14.147.231 (US/United States/-): 2 in the last 3600 secs; IP: 72.14.147.231; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/06/04 14:27:04 [error] 910#910: 5894 open() "/home/tmiland/public_html/js/config.js" failed (2: No such file or directory), client: 72.14.147.231, server: ., request: "GET /js/config.js HTTP/1.1", host: "." 72.14.147.231 - - [04/Jun/2026:14:27:03 +0200] "GET /.env HTTP/1.1" 404 11089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" show less	Brute-Force
🇸🇬 anotherwatcher	2026-06-04 12:22:34 (23 hours ago)	bad bot	Bad Web Bot
🇮🇩 Burayot	2026-06-03 23:22:37 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 72.14.147.231 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 72.14.147.231 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-06-03 13:33:35 (1 day ago)	72.14.147.231 - - [03/Jun/2026:15:33:30 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 ... show more 72.14.147.231 - - [03/Jun/2026:15:33:30 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack
Anonymous	2026-06-03 11:27:40 (2 days ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇨🇭 4server	2026-06-03 11:00:28 (2 days ago)	[WedJun0313:00:21.6983782026][security2:error][pid2719719:tid2719968][client72.14.147.231:0]ModSecur ... show more [WedJun0313:00:21.6983782026][security2:error][pid2719719:tid2719968][client72.14.147.231:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mm-ingegneria.ch.81-17-25-250.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"aiAJRacZRleroSoO9HqF5QAAAAE\"] show less	Hacking Web App Attack
🇮🇹 www.tana.it	2026-06-03 10:52:52 (2 days ago)	PHP scan	Web App Attack
🇩🇪 ghostwarriors	2026-06-03 10:50:22 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.32

🇻🇳 27.79.45.129

🇧🇷 131.161.249.165

🇧🇷 131.100.242.102

🇸🇦 130.94.57.219

🇱🇹 62.60.130.82

🇳🇱 45.148.10.34

🇲🇽 38.124.192.114

🇧🇪 34.79.3.96

🇧🇪 34.77.160.246

🇺🇸 216.218.206.113

🇸🇪 188.150.194.197

🇧🇷 186.251.71.202

🇦🇪 132.243.121.237

🇺🇸 130.131.220.95

🇺🇸 130.94.11.17

🇭🇰 103.230.240.59

🇮🇩 103.165.206.238

🇺🇸 74.125.72.16

🇨🇳 8.152.209.0