JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.73.163.1

216.73.163.1 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 71%: ?

71%

ISP	Prefixx, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	prefixx.net
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.73.163.1

Whois 216.73.163.1

IP Abuse Reports for 216.73.163.1:

This IP address has been reported a total of 189 times from 99 distinct sources. 216.73.163.1 was first reported on March 5th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 KnightIndustries	2026-07-19 01:02:57 (17 hours ago)	2026-07-19T02:03:08.858412+02:00 milkyway wordpress(learncryptography.pw)[3960380]: Authentication f ... show more 2026-07-19T02:03:08.858412+02:00 milkyway wordpress(learncryptography.pw)[3960380]: Authentication failure for TheSpaceButt from 216.73.163.1 2026-07-19T02:03:08.899718+02:00 milkyway wordpress(learncryptography.pw)[3967669]: Authentication failure for mystic from 216.73.163.1 2026-07-19T03:02:56.054424+02:00 milkyway wordpress(learncryptography.pw)[3960380]: Authentication attempt for unknown user MysticKnightUK from 216.73.163.1 ... show less	Brute-Force Web App Attack
🇧🇬 HighWay	2026-07-18 15:35:38 (1 day ago)	216.73.163.1 - - [18/Jul/2026:15:35:34 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 ... show more 216.73.163.1 - - [18/Jul/2026:15:35:34 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 216.73.163.1 - - [18/Jul/2026:15:35:35 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 216.73.163.1 - - [18/Jul/2026:15:35:35 +0000] "POST //xmlrpc.php HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-07-18 05:46:11 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-17 16:32:04 (2 days ago)	Wordfence waf block on 1105merrystreet	Web App Attack
🇳🇱 ipoac.nl	2026-07-17 09:17:54 (2 days ago)	2026-07-17T11:17:52.909021+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 216.73.163. ... show more 2026-07-17T11:17:52.909021+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 216.73.163.1 show less	Web App Attack
🇺🇸 koinkash.org	2026-07-17 05:17:05 (2 days ago)	They are fraudulent. Malicious threat actor requesting css file /wp-includes/css/buttons.css	Web App Attack
🇳🇱 ipoac.nl	2026-07-16 18:53:51 (2 days ago)	-:443 216.73.163.1 - - [16/Jul/2026:20:53:50 +0200] - "POST /wp-login.php HTTP/1.1" 403 4995 "-" "Mo ... show more -:443 216.73.163.1 - - [16/Jul/2026:20:53:50 +0200] - "POST /wp-login.php HTTP/1.1" 403 4995 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J320M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.93 Mobile Safari/537.36" show less	Bad Web Bot
🇪🇸 masterguru	2026-07-16 14:40:43 (3 days ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇳🇱 ipoac.nl	2026-07-16 12:23:38 (3 days ago)	2026-07-16T14:23:36.900545+02:00 ipoac.nl wordpress(-)-: Authentication attempt for unknown user-fro ... show more 2026-07-16T14:23:36.900545+02:00 ipoac.nl wordpress(-)-: Authentication attempt for unknown user-from 216.73.163.1 show less	Web App Attack
Anonymous	2026-07-15 19:52:49 (3 days ago)	"GET /wp-includes/css/buttons.css HTTP/1.1"	Hacking Web App Attack
🇩🇪 pltcldvlpr	2026-07-15 13:25:38 (4 days ago)	CMS/framework probe: 216.73.163.1 - - [15/Jul/2026:15:25:37 +0200] "GET /wp-includes/css/buttons.css ... show more CMS/framework probe: 216.73.163.1 - - [15/Jul/2026:15:25:37 +0200] "GET /wp-includes/css/buttons.css HTTP/2.0" 404 162 "http://carpedictionary.eric-beltermann.de/wp-includes/css/buttons.css" "Go-http-client/2.0" asn=206092 org="F.N.S. HOLDINGS LIMITED" country=US ... show less	Web App Attack
🇦🇹 Pingger Shikkoken	2026-07-10 07:35:50 (1 week ago)	2026-07-10T07:35:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-10T07:35:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=216.73.163.1 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=32382 DF PROTO=TCP SPT=49519 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-10T07:35:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=216.73.163.1 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=32383 DF PROTO=TCP SPT=49519 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-10T07:35:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=216.73.163.1 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=32384 DF PROTO=TCP SPT=49519 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
🇪🇸 masterguru	2026-07-09 12:48:29 (1 week ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
Anonymous	2026-07-05 16:19:53 (2 weeks ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-28 20:44:33 (2 weeks ago)	216.73.163.1 - - [28/Jun/2026:22:43:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6358 "-" "Mozilla/5.0 ... show more 216.73.163.1 - - [28/Jun/2026:22:43:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6358 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.0.0 Safari/537.36" 216.73.163.1 - - [28/Jun/2026:22:44:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6358 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36" 216.73.163.1 - - [28/Jun/2026:22:44:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6358 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/82.0.0.0 Safari/537.36" show less	Hacking Web App Attack

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.84

🇺🇸 172.239.71.245

🇺🇸 157.55.39.54

🇨🇳 106.117.105.87

🇹🇭 103.247.61.20

🇮🇳 59.98.148.5

🇺🇸 50.116.26.161

🇧🇷 205.210.31.145

🇲🇽 189.203.37.14

🇩🇿 154.241.17.157

🇵🇰 119.156.28.157

🇨🇳 111.14.105.62

🇺🇸 97.107.131.17

🇫🇷 85.217.140.49

🇦🇺 65.254.93.170

🇺🇸 64.85.209.53

🇬🇧 45.82.76.121

🇨🇳 14.103.103.211

🇫🇮 2.27.42.164

🇫🇷 185.182.8.9