JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.216.6

173.239.216.6 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 30%: ?

30%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	logicweb.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.216.6

Whois 173.239.216.6

IP Abuse Reports for 173.239.216.6:

This IP address has been reported a total of 108 times from 54 distinct sources. 173.239.216.6 was first reported on August 12th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-10 09:43:59 (1 week ago)	WordPress probing \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ... show more WordPress probing \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36 show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-08-10 09:06:30 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇸🇮 administrator	2026-08-05 22:08:20 (1 week ago)	2026-08-05 00:07:28,162 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216. ... show more 2026-08-05 00:07:28,162 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216.6 2026-08-05 00:07:28,162 fail2ban.actions [1590202]: NOTICE [apache-badbots] Ban 173.239.216.6 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇮 administrator	2026-07-24 22:02:11 (3 weeks ago)	2026-07-22 11:43:13,740 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.6 2 ... show more 2026-07-22 11:43:13,740 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.6 2026-07-22 11:43:13,740 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.6 2026-07-22 11:43:13,740 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 173.239.216.6 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇲🇾 Rizzy	2026-07-22 14:11:33 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 raph	2026-07-10 04:56:08 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-10 03:36:01 (1 month ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇯🇵 demonsword	2026-06-06 13:38:34 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇫🇷 Octopuce	2026-04-29 11:30:42 (3 months ago)	Aggressive web search of vulnerable pages: /wp-includes/class-wp-meta-query-set.php /wp-includes/wid ... show more Aggressive web search of vulnerable pages: /wp-includes/class-wp-meta-query-set.php /wp-includes/widgets/class-wp-widget-meta-https.php /wp-con ... show less	Web App Attack
🇬🇧 consul.to	2026-04-24 03:26:05 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇺 aranguren.org	2026-04-20 17:43:26 (3 months ago)	173.239.216.6 - - [21/Apr/2026:03:43:25 +1000] "GET /go.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windo ... show more 173.239.216.6 - - [21/Apr/2026:03:43:25 +1000] "GET /go.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 173.239.216.6 - - [21/Apr/2026:03:43:25 +1000] "GET /byp.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 173.239.216.6 - - [21/Apr/2026:03:43:25 +1000] "GET /in.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 173.239.216.6 - - [21/Apr/2026:03:43:25 +1000] "GET /geju.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 173.239.216.6 - - [21/Apr/2026:03:43:26 +1000] "GET /wp-signup.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 173.239.216.6 - - [21/Apr/2026:03:43:26 +1000] "GET ... show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-04-17 03:47:59 (4 months ago)	Scanning for web/db/file exploits on www.bspvastgoed.nl	SQL Injection Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-17 01:42:40 (4 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-15 02:20:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 173.239.216.6 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 173.239.216.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 22:20:48.737042 2026] [security2:error] [pid 1245527:tid 1245554] [client 173.239.216.6:62971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccgparquitectos.com"] [uri "/.git/execute.php"] [unique_id "ad72AD8oqiYyEVOZhtx7BgAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-04-13 17:20:07 (4 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)	Hacking Bad Web Bot

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.191

🇸🇬 165.232.164.223

🇺🇸 152.32.206.49

🇫🇮 147.185.133.221

🇫🇷 104.23.229.56

🇸🇪 83.233.97.33

🇮🇳 223.182.99.153

🇦🇷 209.61.7.229

🇦🇷 190.9.70.86

🇫🇷 176.169.15.103

🇺🇸 162.216.150.207

🇨🇳 112.94.252.182

🇺🇸 107.175.183.32

🇫🇷 91.231.89.154

🇺🇸 76.192.119.243

🇱🇹 62.60.130.253

🇧🇾 46.53.193.236

🇺🇸 45.92.229.62

🇮🇩 36.71.176.137

🇧🇷 187.6.140.111