JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.239.216.223

173.239.216.223 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 73%: ?

73%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	logicweb.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.239.216.223

Whois 173.239.216.223

IP Abuse Reports for 173.239.216.223:

This IP address has been reported a total of 28 times from 25 distinct sources. 173.239.216.223 was first reported on June 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-10-16 07:54:50 (1 day ago)	10 attempts against mh-misc-ban on solar	Web App Attack
🇫🇷 dynamix	2026-10-16 03:42:39 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-10-16 03:03:57 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇪🇸 pipeline.es	2026-10-15 23:04:47 (1 day ago)	WordPress login brute-force \| URL: https://www.gacetadelturismo.com/xmlrpc.php \| Evidence: {\"integr ... show more WordPress login brute-force \| URL: https://www.gacetadelturismo.com/xmlrpc.php \| Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-15T23:04:01Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"173.239.216.223\",\"status_code\":503,\"url\":\"https://www.gacetadelturismo.com/xmlrpc.php\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\",\"wfid\":47381 \| ASN: F.n.s. Holdings Limited \| Country: CH show less	Brute-Force
🇦🇺 screwlooseit.com.au	2026-10-15 22:17:59 (1 day ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇩🇪 OiledAmoeba	2026-10-15 20:07:36 (2 days ago)	173.239.216.223 - - [15/Oct/2026:22:05:11 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 20 ... show more 173.239.216.223 - - [15/Oct/2026:22:05:11 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 5292 "https://www.ruhnke.cloud/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0" "114.142.37.54" 12.093 173.239.216.223 - - [15/Oct/2026:22:05:36 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 5292 "https://www.ruhnke.cloud/wp-login.php" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36" "155.246.62.81" 12.063 173.239.216.223 - - [15/Oct/2026:22:05:59 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 5292 "https://www.ruhnke.cloud/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" "140.225.119.102" 12.009 173.239.216.223 - - [15/Oct/2026:22:06:24 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 5292 "https://www.ruhnke.cloud/wp-login.php" "Mozilla/5.0 (Macinto ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-10-15 19:37:05 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 Starburst SysOp Team	2026-10-08 07:48:07 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-3)	Hacking Bad Web Bot
🇳🇱 DrLex0	2026-10-08 07:34:25 (1 week ago)	Probing for various exploits, distributed attack from multiple IPs in shitty 173.239.216.0/24 netwo ... show more Probing for various exploits, distributed attack from multiple IPs in shitty 173.239.216.0/24 network range 173.239.216.223 80 - [08/Oct/2026:07:33:25 +0000] "GET /.git/config HTTP/1.1" 404 533 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" 173.239.216.223 443 - [08/Oct/2026:07:34:07 +0000] "GET /__tests__/test-become/.env HTTP/1.1" 404 5368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:105.0) Gecko/20100101 Firefox/105.0" 173.239.216.223 80 - [08/Oct/2026:07:34:25 +0000] "GET /..;/env.production.js HTTP/1.1" 404 533 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-08 01:45:29 (1 week ago)	113 requests with url.path */config/parameters.yml	Brute-Force Bad Web Bot
🇫🇷 Kejult	2026-10-08 01:04:57 (1 week ago)	Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 74 request eve ... show more Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 74 request event(s), 68 distinct path(s), 13 request(s) to suspicious path(s). Examples: /.env, /info.php, /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php, /phpinfo.php, /.env.prod. show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Tamsy	2026-10-07 23:03:30 (1 week ago)	HTTPD - 4xx scan	Web App Attack
🇺🇸 Starburst SysOp Team	2026-10-07 22:14:41 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇳🇱 0xffffffff	2026-10-07 19:55:04 (1 week ago)	[2026-10-07 22:54:59.632396] [authz_core:error] [pid 4080377:tid 125277476742848] [client 173.239.21 ... show more [2026-10-07 22:54:59.632396] [authz_core:error] [pid 4080377:tid 125277476742848] [client 173.239.216.223:24389] AH01630: client denied by server configuration: /var/www/html/config.prod.json , error_notes:wrong-host , URI:'/config.prod.json' [2026-10-07 22:54:59.972197] [authz_core:error] [pid 4080377:tid 125277578168000] [client 173.239.216.223:24389] AH01630: client denied by server configuration: /var/www/html/config.production.json , error_notes:wrong-host , URI:'/config.production.json' [2026-10-07 22:55:00.352294] [authz_core:error] [pid 4080377:tid 125277485135552] [client 173.239.216.223:24389] AH01630: client denied by server configuration: /var/www/html/production.json , error_notes:wrong-host , URI:'/production.json' [2026-10-07 22:55:01.297220] [authz_core:error] [pid 4080377:tid 125277594953408] [client 173.239.216.223:24389] AH01630: client denied by server configuration: /var/www/html/configs.json , error_notes:wrong-host , URI:'/configs.json' [2026-10-07 22:55:01.560424] [authz_core:error] [p show less	Web App Attack Bad Web Bot
🇲🇽 octageeks.com	2026-08-29 04:31:06 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.191.94.172

🇨🇳 124.207.165.138

🇳🇱 45.148.10.151

🇧🇪 34.156.103.50

🇸🇪 34.51.240.116

🇳🇱 195.178.110.30

🇫🇷 185.246.87.102

🇦🇷 181.168.175.19

🇸🇪 171.25.158.155

🇨🇳 111.21.60.158

🇳🇱 109.160.32.127

🇩🇪 64.89.160.91

🇫🇷 51.68.226.87

🇳🇱 45.148.10.39

🇧🇷 35.198.37.200

🇺🇸 20.80.105.137

🇵🇰 2400:adc7:310e:f300:80ea:697:7d3f:463b

🇺🇸 192.9.228.120

🇺🇸 185.64.181.238

🇰🇷 175.115.29.122