173.239.216.11
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- LogicWeb Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS206092
- Domain Name
- logicweb.com
- Country
- 🇨🇭 Switzerland
- City
- Zurich, Zurich
Abuse Reports
Total reports
114 from
56 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇸 robotstxt |
|
Web App Attack | |
| 🇺🇸 xmission.com |
173.239.216.11 - - [12/Nov/2026:07:38:13 -0700] "POST /xmlrpc.php HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
...
|
Web App Attack | |
| 🇩🇪 R.G. |
(XMLRPCorWHATEVER) Get lost please 173.239.216.11 (CH/Switzerland/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
|
Web App Attack | |
| 🇳🇱 Site.eu |
WordPress login brute force (wp-login/xmlrpc login attempts)
|
Brute-Force Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇩🇪 datajt |
Web vulnerability probing (CrowdSec scenario crowdsecurity/http-probing).
|
Web App Attack | |
| 🇩🇪 pltcldvlpr |
CMS/framework probe: 173.239.216.11 - - [12/Sep/2026:14:29:20 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p= HTTP/2.0" 404 162 "-" "Go-http-client/2.0" asn=206092 org="F.N.S. HOLDINGS LIMITED" country=CH
...
|
Web App Attack | |
| 🇺🇸 lostswordfish.com |
Wordfence waf block on coloradopilots civi
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
|
Bad Web Bot Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from 4 different servers
|
Brute-Force Web App Attack | |
| 🇫🇷 masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 173.239.216.11 (CH/Switzerland/-): 1 in the last 3600 secs (0-196)
|
Hacking | |
| 🇬🇧 Oakley |
(confirmed_bot_sig) Confirmed bot
|
Hacking | |
| 🇳🇱 Roderic |
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
|
Port Scan | |
| 🇫🇷 Octopuce |
Aggressive web search of vulnerable pages: /wp-includes/blocks/calendar/index.php /wp-includes/IXR/db.php /wp-includes/interactivity-api/about. ...
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown