JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.73.162.53

216.73.162.53 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 57%: ?

57%

ISP	Prefixx, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	prefixx.net
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.73.162.53

Whois 216.73.162.53

IP Abuse Reports for 216.73.162.53:

This IP address has been reported a total of 98 times from 39 distinct sources. 216.73.162.53 was first reported on November 13th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Luhte	2026-06-11 19:25:32 (4 days ago)	Unsolicited TCP connection from 216.73.162.53 to port 0 at 2026-06-11T19:25:32Z. Source IP completed ... show more Unsolicited TCP connection from 216.73.162.53 to port 0 at 2026-06-11T19:25:32Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇨🇦 smick	2026-06-08 23:28:45 (1 week ago)	Brute-force attack.	Brute-Force
🇨🇦 Luhte	2026-06-08 23:28:40 (1 week ago)	Unsolicited TCP connection from 216.73.162.53 to port 0 at 2026-06-08T23:28:40Z. Source IP completed ... show more Unsolicited TCP connection from 216.73.162.53 to port 0 at 2026-06-08T23:28:40Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇬🇧 SilverZippo	2026-06-04 04:59:08 (1 week ago)	Web App Attack	Web App Attack
🇬🇧 consul.to	2026-06-02 17:04:02 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 14:37:24 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 216.73.162.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 216.73.162.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 10:37:19.951167 2026] [security2:error] [pid 6651:tid 6670] [client 216.73.162.53:50383] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|draginich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "draginich.com"] [uri "/images/stories/themes.php"] [unique_id "ah7qn6M8VPTylZqSzuhKiQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-06-02 14:35:53 (1 week ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇦🇺 aranguren.org	2026-06-02 09:52:06 (1 week ago)	216.73.162.53 - - [02/Jun/2026:19:52:04 +1000] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 404 ... show more 216.73.162.53 - - [02/Jun/2026:19:52:04 +1000] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 216.73.162.53 - - [02/Jun/2026:19:52:04 +1000] "GET /files/index.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 216.73.162.53 - - [02/Jun/2026:19:52:05 +1000] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 216.73.162.53 - - [02/Jun/2026:19:52:05 +1000] "GET /inc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 216.73.162.53 - - [02/Jun/2026:19:52:05 +1000] "GET /wp-content/index.php HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win6 ... show less	Bad Web Bot
🇫🇷 masterguru	2026-05-31 14:45:22 (2 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇩🇪 Vegascosmetics	2026-05-28 21:51:16 (2 weeks ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-17 11:05:04 (4 weeks ago)	Request Overload (284)	Brute-Force Web App Attack
🇳🇿 Antinson	2026-05-16 02:09:11 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 mnsf	2026-05-13 11:05:24 (1 month ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 10:30:53 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 216.73.162.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 216.73.162.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 06:30:45.277921 2026] [security2:error] [pid 3187:tid 3187] [client 216.73.162.53:36611] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|islandchristmascards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "islandchristmascards.com"] [uri "/images/stories/themes.php"] [unique_id "agRS1aEqYV2WrOPxGd5VigAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-13 00:47:00 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/theme-check.php /wp-conten ... show more Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/theme-check.php /wp-content/plugins/WordPressCore/include.php /wp-con ... show less	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 84.162.11.241

🇨🇳 58.222.72.182

🇧🇷 45.205.1.245

🇺🇸 40.126.28.22

🇩🇪 209.50.185.1

🇺🇸 181.214.165.113

🇫🇷 172.71.232.150

🇫🇮 147.185.133.81

🇺🇸 147.93.179.130

🇺🇸 138.197.19.5

🇨🇳 125.40.32.134

🇨🇳 117.72.110.172

🇸🇪 104.23.223.99

🇬🇧 87.236.176.137

🇩🇪 87.106.29.151

🇨🇳 36.163.227.186

🇺🇸 23.239.12.34

🇸🇪 2400:cb00:1032:1000:f8f7:e6a6:2ca2:1343

🇺🇸 208.87.243.35

🇷🇴 188.213.1.58