This IP address has been reported a total of
123
times from
58 distinct
sources.
216.73.216.195 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 25565
GET /robots.txt
User-Agent: Mozilla/5.0 Apple ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 25565
GET /robots.txt
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])
Accept: */*
Accept-Encoding: gzip, br, zstd, deflate; 25565 [2] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
{"ClientAddr":"104.23.170.193:14267","ClientHost":"216.73.216.195","ClientPort":"14267","ClientUsern ...
show more{"ClientAddr":"104.23.170.193:14267","ClientHost":"216.73.216.195","ClientPort":"14267","ClientUsername":"-","DownstreamContentSize":24,"DownstreamStatus":404,"Duration":1228325,"OriginContentSize":24,"OriginDuration":1098154,"OriginStatus":404,"Overhead":130171,"RequestAddr":"sftp.timvdberg.dev","RequestContentSize":0,"RequestCount":428805,"RequestHost":"sftp.timvdberg.dev","RequestMethod":"GET","RequestPath":"/robots.txt","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"sftpgo@docker","ServiceAddr":"172.16.16.9:8080","ServiceName":"sftpgo@docker","ServiceURL":"http://172.16.16.9:8080","StartLocal":"2026-06-23T12:03:37.543607648Z","StartUTC":"2026-06-23T12:03:37.543607648Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"216.73.216.195","request_X-Forwarded-For":"216.73.216.195","request_X-Real-Ip":"104.23.170.193","time":"2026-06-23T12:03:37Z"}
...
show less
{"ClientAddr":"104.23.170.193:13751","ClientHost":"216.73.216.195","ClientPort":"13751","ClientUsern ...
show more{"ClientAddr":"104.23.170.193:13751","ClientHost":"216.73.216.195","ClientPort":"13751","ClientUsername":"-","DownstreamContentSize":24,"DownstreamStatus":404,"Duration":805743,"OriginContentSize":24,"OriginDuration":685167,"OriginStatus":404,"Overhead":120576,"RequestAddr":"sftp.timvdberg.dev","RequestContentSize":0,"RequestCount":391881,"RequestHost":"sftp.timvdberg.dev","RequestMethod":"GET","RequestPath":"/robots.txt","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"sftpgo@docker","ServiceAddr":"172.16.16.9:8080","ServiceName":"sftpgo@docker","ServiceURL":"http://172.16.16.9:8080","StartLocal":"2026-06-22T03:51:34.115703392Z","StartUTC":"2026-06-22T03:51:34.115703392Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"216.73.216.195","request_X-Forwarded-For":"216.73.216.195","request_X-Real-Ip":"104.23.170.193","time":"2026-06-22T03:51:34Z"}
{"Cl
...
show less
(PERMBLOCK) 216.73.216.195 (US/United States/-) has had more than 4 temp blocks in the last 604800 s ...
show more(PERMBLOCK) 216.73.216.195 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000- ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-169)
show less
(PERMBLOCK) 216.73.216.195 (US/United States/-) has had more than 4 temp blocks in the last 604800 s ...
show more(PERMBLOCK) 216.73.216.195 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less