JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.73.163.66

216.73.163.66 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 47%: ?

47%

ISP	Prefixx, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	prefixx.net
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.73.163.66

Whois 216.73.163.66

IP Abuse Reports for 216.73.163.66:

This IP address has been reported a total of 189 times from 90 distinct sources. 216.73.163.66 was first reported on March 7th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-27 21:11:39 (4 days ago)	recidive - IP: 216.73.163.66 - 2026-06-27 21:42:14,290 fail2ban.actions [1068196]: NOTICE [plesk-wo ... show more recidive - IP: 216.73.163.66 - 2026-06-27 21:42:14,290 fail2ban.actions [1068196]: NOTICE [plesk-wordpress] Ban 216.73.163.66 2026-06-27 22:25:43,270 fail2ban.actions [1068196]: NOTICE [plesk-wordpress] Ban 216.73.163.66 2026-06-27 23:11:38,811 fail2ban.actions [1068196]: NOTICE [plesk-wordpress] Ban 216.73.163.66 show less	Web App Attack
Anonymous	2026-06-27 07:13:30 (4 days ago)	Fail2Ban - Wordpress brute-force ...	Brute-Force Web App Attack
🇺🇸 Lee Daniel	2026-06-26 16:31:02 (5 days ago)	216.73.163.66 - - [26/Jun/2026:12:30:57 -0400] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps. ... show more 216.73.163.66 - - [26/Jun/2026:12:30:57 -0400] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 404 20426 "https://safetysupplyco.com/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php" "Go-http-client/2.0" 216.73.163.66 - - [26/Jun/2026:12:30:58 -0400] "GET /wp-includes/mer_gagal.php HTTP/1.1" 404 20322 "https://safetysupplyco.com/wp-includes/mer_gagal.php" "Go-http-client/2.0" 216.73.163.66 - - [26/Jun/2026:12:30:58 -0400] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 404 20360 "https://safetysupplyco.com/wp-admin/css/colors/lock.php" "Go-http-client/2.0" 216.73.163.66 - - [26/Jun/2026:12:31:00 -0400] "GET /wp-content/plugins/mtodm HTTP/1.1" 404 20303 "https://obl.com.bb/wp-content/plugins/mtodm/" "Go-http-client/2.0" 216.73.163.66 - - [26/Jun/2026:12:31:01 -0400] "GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php HTTP/1.1" 404 20525 "https://safetysupplyco.com/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transfo ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 11:50:12 (5 days ago)	(mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:50:08.533403 2026] [security2:error] [pid 15828:tid 15828] [client 216.73.163.66:61493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|interartny.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "interartny.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj5ncG7qgR171BKGu-BNXgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 01:05:26 (5 days ago)	(mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:05:22.640802 2026] [security2:error] [pid 3173:tid 3173] [client 216.73.163.66:41521] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6787"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|aeomis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "aeomis.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj3QUkLW3YXtmW9KgFSHAwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 23:44:28 (5 days ago)	(mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 216.73.163.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:44:22.288208 2026] [security2:error] [pid 16510:tid 16510] [client 216.73.163.66:56423] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|krmartindale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "krmartindale.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj29VoHvuFz6o7Pf0ARv6gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-07 10:38:22 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇬🇧 consul.to	2026-06-04 10:53:21 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 LRob.fr	2026-06-03 13:45:12 (4 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 mashamal	2026-05-31 04:42:19 (1 month ago)	Vulnerability Probe ...	Web App Attack
🇩🇪 LRob.fr	2026-05-30 15:15:09 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-12 09:08:48 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇬🇧 consul.to	2026-05-12 08:55:37 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 middelkoopcc	2026-05-11 00:05:05 (1 month ago)	2026-05-11 01:57:55 [remote 216.73.163.66:33543] AH01276: Cannot serve directory /<redacted>/wp-cont ... show more 2026-05-11 01:57:55 [remote 216.73.163.66:33543] AH01276: Cannot serve directory /<redacted>/wp-content/uploads/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-05-11 01:57:57 [remote 216.73.163.66:33543] AH01276: Cannot serve directory /<redacted>/wp-admin/css/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-05-11 01:58:15 [remote 216.73.163.66:33543] AH01276: Cannot serve directory /<redacted>/wp-admin/js/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 99 more within 20 minutes show less	Web App Attack
Anonymous	2026-05-10 22:31:37 (1 month ago)	Multiple, malicious web requests detected	Port Scan Hacking

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 167.172.89.254

🇺🇸 162.216.150.221

🇺🇸 129.212.186.79

🇺🇸 91.193.232.243

🇷🇴 80.94.92.179

🇺🇸 34.44.232.32

🇺🇸 4.246.204.51

🇰🇷 211.246.160.21

🇺🇸 207.46.13.116

🇧🇷 205.210.31.221

🇷🇴 92.118.39.49

🇳🇱 91.92.40.204

🇫🇷 85.217.140.45

🇳🇱 45.148.10.230

🇳🇱 45.148.10.151

🇪🇬 197.199.224.52

🇨🇳 121.14.34.219

🇲🇩 91.208.184.128

🇩🇪 80.128.252.52

🇰🇷 61.80.241.73