JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.216.199

173.239.216.199 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 73%: ?

73%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	logicweb.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.216.199

Whois 173.239.216.199

IP Abuse Reports for 173.239.216.199:

This IP address has been reported a total of 32 times from 27 distinct sources. 173.239.216.199 was first reported on June 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-10-16 08:30:56 (1 day ago)	10 attempts against mh-misc-ban on solar	Web App Attack
🇫🇷 dynamix	2026-10-16 07:45:10 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-10-16 06:50:01 (1 day ago)	WordPress login brute-force \| URL: https://gacetadelturismo.com/xmlrpc.php \| Evidence: {\"integratio ... show more WordPress login brute-force \| URL: https://gacetadelturismo.com/xmlrpc.php \| Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-16T06:48:49Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"173.239.216.199\",\"status_code\":503,\"url\":\"https://gacetadelturismo.com/xmlrpc.php\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\",\"wfid\":4738184} \| ASN: F.n.s. Holdings Limited \| Country: CH show less	Brute-Force
🇺🇸 xmission.com	2026-10-16 04:36:25 (1 day ago)	173.239.216.199 - - [15/Oct/2026:22:36:24 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5. ... show more 173.239.216.199 - - [15/Oct/2026:22:36:24 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-16 01:16:40 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-15 22:07:51 (1 day ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇩🇪 OiledAmoeba	2026-10-15 20:01:09 (1 day ago)	173.239.216.199 - - [15/Oct/2026:21:59:14 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/2.0" 200 ... show more 173.239.216.199 - - [15/Oct/2026:21:59:14 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/2.0" 200 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0" "9.213.3.251" 0.505 173.239.216.199 - - [15/Oct/2026:21:59:28 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/2.0" 200 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0" "86.226.61.225" 0.534 173.239.216.199 - - [15/Oct/2026:21:59:41 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/2.0" 200 244 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" "186.58.158.52" 0.493 173.239.216.199 - - [15/Oct/2026:22:00:07 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/2.0" 200 244 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" "159.53.68.230" 0.533 173.239.216.199 - - [15/Oct/2026:22:00:30 +0200] "www.ruhnke.cloud" "POST /xmlrpc ... show less	Brute-Force
🇺🇸 Starburst SysOp Team	2026-10-08 07:43:52 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-3)	Hacking Bad Web Bot
🇳🇱 DrLex0	2026-10-08 07:34:41 (1 week ago)	Probing for various exploits, distributed attack from multiple IPs in shitty 173.239.216.0/24 netwo ... show more Probing for various exploits, distributed attack from multiple IPs in shitty 173.239.216.0/24 network range 173.239.216.199 443 - [08/Oct/2026:07:34:41 +0000] "GET /_profiler/open?file=app/config/parameters.yml HTTP/1.1" 410 5356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" 173.239.216.199 443 - [08/Oct/2026:07:34:41 +0000] "GET /app/config/parameters.yml HTTP/1.1" 410 544 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" 173.239.216.199 443 - [08/Oct/2026:07:34:41 +0000] "GET /config/parameters.yml HTTP/1.1" 404 556 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-08 02:37:43 (1 week ago)	128 requests with url.path *config.json	Brute-Force Bad Web Bot
🇦🇹 Starburst SysOp Team	2026-10-08 01:03:41 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-vie6-1)	Hacking Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-10-07 22:15:11 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇸🇪 SkyDancer	2026-10-07 21:01:18 (1 week ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇳🇱 0xffffffff	2026-10-07 19:55:23 (1 week ago)	[2026-10-07 22:55:20.122629] [authz_core:error] [pid 4080377:tid 125277334132416] [client 173.239.21 ... show more [2026-10-07 22:55:20.122629] [authz_core:error] [pid 4080377:tid 125277334132416] [client 173.239.216.199:50015] AH01630: client denied by server configuration: /var/www/html/main.js , error_notes:wrong-host , URI:'/main.js' [2026-10-07 22:55:20.660344] [authz_core:error] [pid 4080377:tid 125277308954304] [client 173.239.216.199:50015] AH01630: client denied by server configuration: /var/www/html/index.js , error_notes:wrong-host , URI:'/index.js' [2026-10-07 22:55:21.437095] [authz_core:error] [pid 4080377:tid 125277586560704] [client 173.239.216.199:50015] AH01630: client denied by server configuration: /var/www/html/static , error_notes:wrong-host , URI:'/static/js/config.js' [2026-10-07 22:55:21.698069] [authz_core:error] [pid 4080377:tid 125277476742848] [client 173.239.216.199:50015] AH01630: client denied by server configuration: /var/www/html/static , error_notes:wrong-host , URI:'/static/config.js' [2026-10-07 22:55:21.895858] [authz_core:error] [pid 4080376:tid 125277434779328] [client 173.239.216.1 show less	Web App Attack Bad Web Bot
🇷🇴 DamonOne	2026-10-04 22:01:20 (1 week ago)	Blocked by OPNsense; 11 hits, proto=tcp,udp, ports=6881	Port Scan Hacking

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.240

🇬🇧 193.32.209.235

🇹🇳 102.30.21.199

🇮🇱 83.130.125.186

🇨🇭 209.99.190.215

🇲🇦 196.92.7.249

🇧🇬 79.124.56.138

🇨🇳 60.16.199.43

🇺🇸 45.56.94.61

🇩🇿 41.108.130.1

🇮🇳 20.244.17.248

🇨🇳 14.103.117.85

🇰🇷 1.238.106.229

🇲🇽 201.143.113.199

🇧🇷 190.115.84.25

🇭🇰 185.242.235.139

🇺🇸 185.180.141.107

🇮🇩 182.9.36.59

🇺🇸 162.216.150.18

🇨🇳 125.86.31.99