173.239.216.20

Classification: Malicious

173.239.216.20 is a malicious IP address. Reported by 6 threat sources, last seen 2026-08-12. Network: AS206092 Logicweb Inc..

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Bruteforce login attacker Blocklist.de 2026-08-06 09:00:16 2026-08-12 09:00:57 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-06 07:00:15 2026-08-12 07:01:03 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-07-24 02:09:19 2026-04-29 11:27:03 anomalous-activity
HTTP bot Blocklist.de 2026-01-14 10:06:58 2026-01-14 10:06:58 malicious-activity
VPN IPWhois.io 2025-05-21 19:17:20 2025-11-15 02:49:53 anonymization
HTTP Spammer StopForumSpam.com 2017-10-15 19:12:29 2025-09-21 00:20:11 malicious-activity
HTTP Spammer Sblam 2025-05-19 07:23:45 2025-05-22 06:40:57 malicious-activity
Proxy IPWhois.io 2025-05-02 13:36:49 2025-05-02 13:36:49 anonymization
HTTP Spammer Cleantalk.org 2024-07-13 00:03:06 2024-07-13 00:03:06 malicious-activity

Tags

bot abuse attacker spam bruteforce apache ddos rfi login joomla wordpress

Whois information

AS name
AS206092 Logicweb Inc.
AS registry
arin
AS date
2010-05-06 00:00:00
AS CIDR
173.239.208.0/20
CIDR
173.239.192.0/18
Registrant
Logicweb Inc.
Address
4509 Steeplechase Dr.
City
Bern
State
PA
Postal code
3011
Country
CH — Switzerland 🇨🇭
Contact email
[email protected], [email protected]
First indexed
2017-10-15 19:12:29
Last updated
2026-08-12 09:00:57

Malicious IPs in the same CIDR

173.239.214.6 173.239.216.13 173.239.220.5 173.239.216.28 173.239.221.8 173.239.216.4 173.239.214.2 173.239.214.10 173.239.214.17 173.239.214.13 173.239.214.14 173.239.214.15 173.239.214.16 173.239.214.12 173.239.214.18 173.239.214.5 173.239.216.21 173.239.216.12 173.239.216.3 173.239.216.20 173.239.216.25 173.239.216.26