JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.198.85

173.239.198.85 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 70%: ?

70%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.198.85

Whois 173.239.198.85

IP Abuse Reports for 173.239.198.85:

This IP address has been reported a total of 154 times from 116 distinct sources. 173.239.198.85 was first reported on July 31st 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 killian7603	2026-10-06 03:43:47 (2 weeks ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇫🇷 basing	2026-10-02 18:40:10 (3 weeks ago)	2026-10-02 19:40:10 idz SASL PLAIN auth failed: rhost=173.239.198.85...	Brute-Force
🇨🇿 lp	2026-10-02 00:21:03 (3 weeks ago)	Email account brute force: 1 attempts were recorded from 173.239.198.85 2026-10-02T00:56:59+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 173.239.198.85 2026-10-02T00:56:59+02:00 warning: unknown[173.239.198.85]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 CoreTech srl	2026-09-19 18:42:32 (1 month ago)	"SMTP Login failed": count(IP)=14.0MAIL4-new 20:37:32.680 [173.239.198.85] SMTP Login failed: Userna ... show more "SMTP Login failed": count(IP)=14.0MAIL4-new 20:37:32.680 [173.239.198.85] SMTP Login failed: Username or password is incorrect.MAIL4-new 20:37:32.680 [173.239.198.85] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 20:38:22.630 [213.178.205.12] SMTP Login failed: Username or password is incorrect.MAIL4-new 20:38:22.630 [213.178.205.12] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 20:39:24.038 [173.239.198.85] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 20:39:24.039 [173.239.198.85] SMTP Login failed: Username or password is incorrect.MAIL4-new 20:41:07.674 [185.253.162.6] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 20:41:07.674 [185.253.162.6] SMTP Login failed: Username or password is incorrect.MAIL4-new 20:41:09.321 [185.253.162.6] SMTP Login failed: Incorrect password for user [[email protected]] show less	Brute-Force Open Proxy
🇮🇹 Inartis	2026-09-19 18:39:56 (1 month ago)	2026-09-19T20:39:55.722471mail1.inartis.it postfix/smtpd[3222179]: warning: unknown[173.239.198.85]: ... show more 2026-09-19T20:39:55.722471mail1.inartis.it postfix/smtpd[3222179]: warning: unknown[173.239.198.85]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇮🇹 Progetto1	2026-09-19 18:38:02 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇩🇪 zUnlegit	2026-09-16 14:12:40 (1 month ago)	2026-09-16 14:12:40: Minecraft server scan detected from 173.239.198.85 on port 25565 of mailserver	Port Scan
🇺🇸 cpxducky	2026-09-16 14:12:31 (1 month ago)	2026-09-16 14:12:31: Minecraft server scan detected from 173.239.198.85 on port 25565 of mail.cpxduc ... show more 2026-09-16 14:12:31: Minecraft server scan detected from 173.239.198.85 on port 25565 of mail.cpxducky.com show less	Port Scan
Anonymous	2026-09-15 22:22:19 (1 month ago)	Blocked by UFW [25565/tcp] \| SPT: 19519 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [25565/tcp] \| SPT: 19519 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 EvoX	2026-09-15 21:28:52 (1 month ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (21 bytes of payload); 25561 [1] TCP	Port Scan
🇺🇸 xmission.com	2026-09-15 21:14:38 (1 month ago)	Blocked by UFW (TCP on 25560) Source port: 1191 TTL: 251 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 25560) Source port: 1191 TTL: 251 Packet length: 40 TOS: 0x00 This report (for 173.239.198.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 hxsain	2026-09-15 20:10:34 (1 month ago)	Blocked by UFW on fr2 [25568/tcp] \| SPT: 5188 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on fr2 [25568/tcp] \| SPT: 5188 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-15 20:00:56 (1 month ago)	Blocked by firewall on hugin [25565/tcp] \| Rule: AbuseIPDB \| SPT: 33778 \| TTL: 245 \| LEN: 40 \| TOS: ... show more Blocked by firewall on hugin [25565/tcp] \| Rule: AbuseIPDB \| SPT: 33778 \| TTL: 245 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 sonot	2026-09-15 19:45:43 (1 month ago)	Blocked by UFW on mail [25560/tcp] \| SPT: 6089 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [25560/tcp] \| SPT: 6089 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-09-15 19:43:45 (1 month ago)	2026-09-15T19:41:54.975350+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-09-15T19:41:54.975350+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=173.239.198.85 DST=157.230.217.55 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=39475 PROTO=TCP SPT=41094 DPT=25562 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-15T19:43:45.298196+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=173.239.198.85 DST=157.230.217.55 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=64271 PROTO=TCP SPT=47485 DPT=25561 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.191

🇲🇽 187.195.171.216

🇪🇨 186.70.234.110

🇩🇴 186.33.113.175

🇳🇱 185.136.15.110

🇧🇷 177.12.24.185

🇫🇷 172.71.232.127

🇸🇬 128.242.235.90

🇺🇸 91.230.168.121

🇸🇬 85.203.21.184

🇸🇬 47.84.133.201

🇨🇦 45.198.224.125

🇬🇧 45.83.88.94

🇩🇪 45.10.232.193

🇸🇬 43.133.61.254

🇳🇱 20.229.185.186

🇺🇸 20.80.108.254

🇳🇱 213.177.179.12

🇺🇸 205.210.31.88

🇦🇷 201.250.0.129