JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.201.16

173.239.201.16 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 2%: ?

ISP	LOGICWEB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	logicweb.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.201.16

Whois 173.239.201.16

IP Abuse Reports for 173.239.201.16:

This IP address has been reported a total of 26 times from 24 distinct sources. 173.239.201.16 was first reported on January 17th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-06-10 00:47:13 (2 weeks ago)	Domain : djchrist.co.uk Rule : wp-login 2026-06-10 00:44:46 *hidden-privacy* GET /shop/wp-login. ... show more Domain : djchrist.co.uk Rule : wp-login 2026-06-10 00:44:46 *hidden-privacy* GET /shop/wp-login.php - 443 - 173.239.201.16 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) - www.djchrist.co.uk 404 0 2 1593 255 322 - - show less	Web App Attack
🇫🇮 Shaik Sai Meera	2026-04-14 12:30:15 (2 months ago)	OSSEC: MySQL unauthenticated aborted connection attack detection	FTP Brute-Force Port Scan SSH
🇫🇮 Ticlem	2026-04-14 06:49:48 (2 months ago)	2026-04-14T08:43:00.454955+02:00 clement-turlure kernel: [ 262.625309] [UFW BLOCK] IN=enp0s31f6 OUT ... show more 2026-04-14T08:43:00.454955+02:00 clement-turlure kernel: [ 262.625309] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=173.239.201.16 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=0 DF PROTO=TCP SPT=59153 DPT=2376 WINDOW=65535 RES=0x00 SYN URGP=0 2026-04-14T08:43:00.456766+02:00 clement-turlure kernel: [ 262.627271] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=173.239.201.16 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP SPT=34487 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 2026-04-14T08:43:00.457936+02:00 clement-turlure kernel: [ 262.627996] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=173.239.201.16 DST=95.216.21.136 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=0 DF PROTO=TCP SPT=56421 DPT=4000 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-03-27 23:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 JPPO	2026-03-27 23:16:13 (2 months ago)	ET EXPLOIT Possible CVE-2020-11910 anomalous ICMPv4 type 3,code 4 Path MTU Discovery ports , ports: ... show more ET EXPLOIT Possible CVE-2020-11910 anomalous ICMPv4 type 3,code 4 Path MTU Discovery ports , ports: 0(x1) 80(x1) 443(x1) 993(x4) 5080(x1) show less	Port Scan
🇺🇸 mutebot.net	2026-03-27 16:57:23 (3 months ago)	SRC=173.239.201.16, PROTO=TCP, SPT=40895, DPT=3003 SRC=173.239.201.16, PROTO=TCP, SPT=48759, DPT=608 ... show more SRC=173.239.201.16, PROTO=TCP, SPT=40895, DPT=3003 SRC=173.239.201.16, PROTO=TCP, SPT=48759, DPT=6082 SRC=173.239.201.16, PROTO=TCP, SPT=39348, DPT=8888 SRC=173.239.201.16, PROTO=TCP, SPT=58234, DPT=50070 SRC=173.239.201.16, PROTO=TCP, SPT=40895, DPT=3003 show less	Port Scan
🇫🇷 JPPO	2026-03-27 14:52:15 (3 months ago)	Multiport scan 9 ports : 0 80 443 993(x4) 5080 5500 6080 8444 9999	Port Scan
🇨🇭 Origon	2026-03-27 14:35:07 (3 months ago)	postfix-non-smtp-command - IP: 173.239.201.16 - time="2026-03-27T15:35:06+01:00" level=info msg="(5 ... show more postfix-non-smtp-command - IP: 173.239.201.16 - time="2026-03-27T15:35:06+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 173.239.201.16 (TH/212238) : 4h ban on Ip 173.239.201.16" module=db show less	Email Spam
🇫🇷 vtchost.com	2026-03-27 08:32:16 (3 months ago)	Mar 27 09:30:05 vtchost kernel: [ 42.507379] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Mar 27 09:30:05 vtchost kernel: [ 42.507379] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=173.239.201.16 DST=161.97.181.152 LEN=28 TOS=0x00 PREC=0x00 TTL=50 ID=38289 DF PROTO=UDP SPT=50001 DPT=139 LEN=8 ... show less	Port Scan
🇺🇸 OceanTreasure	2026-03-23 18:50:05 (3 months ago)	tcp/6380; Multiple SYN connections to closed port (≥10 in 10 min) (R18) @ 2026-03-23T18:43:10Z	Brute-Force
🇭🇺 kranem	2026-03-23 12:00:22 (3 months ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 212238 (CDNEXT) Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 212238 (CDNEXT) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-03-23T10:52:23Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-03-22 06:37:49 (3 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-02-15 07:35:11 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇫🇷 masterguru	2026-02-10 20:33:57 (4 months ago)	Port Scan detected from 173.239.201.16 (TH/Thailand/-). 11 hits in the last 242 seconds (0-193)	Port Scan
🇨🇭 backslash	2025-12-29 11:10:05 (5 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.182.246.240

🇱🇻 81.30.98.44

🇺🇸 18.214.110.147

🇸🇪 193.235.141.171

🇩🇪 193.32.248.240

🇬🇧 193.32.209.253

🇬🇧 193.32.209.248

🇺🇸 193.3.53.3

🇬🇧 188.240.59.25

🇳🇱 176.65.148.30

🇦🇴 105.168.126.76

🇮🇩 103.97.101.25

🇬🇧 216.226.76.20

🇺🇸 216.45.50.119

🇬🇧 193.32.209.247

🇬🇧 193.32.209.242

🇧🇴 190.129.122.12

🇲🇽 187.192.86.153

🇺🇸 173.255.237.76

🇺🇸 172.217.107.30