JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.239.18.17

2.239.18.17 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 0%: ?

ISP	Fastweb SpA
Usage Type	Fixed Line ISP
ASN	AS12874
Hostname(s)	2-239-18-17.ip247.fastwebnet.it
Domain Name	fastweb.it
Country	🇮🇹 Italy
City	Rome, Lazio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.239.18.17

Whois 2.239.18.17

IP Abuse Reports for 2.239.18.17:

This IP address has been reported a total of 44 times from 12 distinct sources. 2.239.18.17 was first reported on February 26th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 bwhitty	2026-02-13 18:01:22 (3 months ago)	Performed brute-force login attempts (>5 in 30s) using dictionary usernames (eg:'admin') on Web Appl ... show more Performed brute-force login attempts (>5 in 30s) using dictionary usernames (eg:'admin') on Web Application Portals of a public-facing Synology NAS (self-hosted domain presence for small business); sufficient to trigger IP auto-block on the host. show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-12-06 22:23:37 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-12-06 06 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-12-06 06:52:05 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dyk&passwd= 2025-12-06 06:57:41 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=chl&passwd= 2025-12-06 07:05:19 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=wch&passwd= 2025-12-06 07:05:22 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=wch&passwd= 2025-12-06 06:57:34 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=chl&passwd= 2025-12-06 06:57:47 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=chl&passwd= 2025-12-06 06:57:52 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=chl&passwd= show less	Web App Attack
🇨🇭 TOCE	2025-12-06 05:10:27 (6 months ago)	3 hits seen on 2025-12-06, ports 5000 (Synology DSM) on a honeypot from www.toce.ch	Brute-Force
🇨🇳 ThreatBook.io	2025-12-03 23:33:38 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-12-03 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-12-03 00:39:06 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=pay4779&passwd= 2025-12-03 00:01:37 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=숙소&passwd= 2025-12-03 00:20:53 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=henry&passwd= 2025-12-03 00:17:41 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=bensonlo&passwd= 2025-12-03 01:03:55 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=raluser&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-30 23:30:54 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-30 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-30 00:56:57 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=xuningjun&passwd= 2025-11-30 00:57:01 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=xuningjun&passwd= 2025-11-30 00:28:06 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=刘欣&passwd= 2025-11-30 00:12:03 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=席波&passwd= 2025-11-30 00:56:52 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=xuningjun&passwd= 2025-11-30 00:56:46 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=xuningjun&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-29 23:39:18 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-29 03 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-29 03:14:27 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=ptp&passwd= 2025-11-29 03:18:59 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=lijin&passwd= 2025-11-29 03:55:19 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dh010&passwd= 2025-11-29 03:55:45 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dh010&passwd= 2025-11-29 03:47:04 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dh015&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-28 04:25:24 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-27 01 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-27 01:01:49 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=antonbk&passwd= 2025-11-27 01:03:29 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=kaifa-pp&passwd= 2025-11-27 01:09:44 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=drazkowskimac&passwd= 2025-11-27 00:19:08 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=elly&passwd= 2025-11-27 00:39:39 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=rafeen&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-27 02:33:41 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-26 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-26 00:19:03 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=sek3&passwd= 2025-11-26 00:34:45 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=jips&passwd= 2025-11-26 00:50:34 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=andrey-ii&passwd= 2025-11-26 00:45:05 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=iis&passwd= 2025-11-26 00:35:22 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=jips&passwd= show less	Web App Attack
🇨🇭 TOCE	2025-11-26 05:55:14 (6 months ago)	6 hits seen on 2025-11-26, ports 5000 (Synology DSM) on a honeypot from www.toce.ch	Brute-Force
🇨🇳 ThreatBook.io	2025-11-25 22:22:07 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-25 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-25 00:10:33 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=720441&passwd= 2025-11-25 00:29:07 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=synobox&passwd= 2025-11-25 00:29:18 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=synobox&passwd= 2025-11-25 00:13:15 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=sululing&passwd= 2025-11-25 00:29:12 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=synobox&passwd= 2025-11-25 00:28:52 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=synobox&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-24 22:22:51 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-24 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-24 00:14:03 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=10265&passwd= 2025-11-24 00:18:15 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=s_jiwon7452&passwd= 2025-11-24 01:11:29 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=10312&passwd= 2025-11-24 01:06:24 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=hpnetsurfix&passwd= 2025-11-24 00:50:42 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=xiutingpc&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-23 22:23:08 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-23 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-23 00:10:53 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=rostania&passwd= 2025-11-23 01:09:33 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=eunseok&passwd= 2025-11-23 00:35:44 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=craig&passwd= 2025-11-23 01:23:13 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=0028&passwd= 2025-11-23 00:57:15 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=hp&passwd= 2025-11-23 01:02:57 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=arpes&passwd= show less	Web App Attack
🇨🇭 TOCE	2025-11-23 19:19:12 (6 months ago)	8 hits seen on 2025-11-23, ports 5000 (Synology DSM) on a honeypot from www.toce.ch	Brute-Force
🇨🇳 ThreatBook.io	2025-11-22 22:19:47 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-22 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-22 00:12:47 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=sascha&passwd= 2025-11-22 00:20:43 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=yae0066-1&passwd= 2025-11-22 00:09:12 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=kjw&passwd= 2025-11-22 00:21:50 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=yae0068&passwd= 2025-11-22 00:26:29 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=yae0073&passwd= 2025-11-22 00:16:23 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=장채린&passwd= show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-21 22:26:36 (6 months ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-21 00 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/2.239.18.17 2025-11-21 00:58:17 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=10063&passwd= 2025-11-21 00:45:51 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=고복석&passwd= 2025-11-21 00:55:44 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=정경훈&passwd= 2025-11-21 00:21:14 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=dorian&passwd= 2025-11-21 01:04:24 //webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=natalia&passwd= show less	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.116.41

🇺🇸 172.234.218.210

🇮🇳 160.250.204.33

🇧🇩 103.208.181.162

🇺🇦 91.123.151.220

🇳🇴 89.10.237.211

🇵🇱 57.128.225.99

🇸🇦 50.60.174.235

🇸🇦 37.125.237.216

🇬🇧 31.14.254.75

🇰🇷 1.245.74.10

🇺🇸 212.119.40.146

🇩🇿 197.113.135.4

🇬🇹 190.149.42.165

🇨🇴 190.61.63.253

🇮🇶 169.224.96.124

🇮🇩 163.7.4.169

🇸🇬 103.134.154.36

🇮🇩 36.66.16.233

🇬🇧 31.14.254.89