173.239.216.28

Classification: Malicious

173.239.216.28 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-11. Network: AS206092 Logicweb Inc..

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP bot Blocklist.de 2026-01-14 10:06:58 2026-08-11 08:00:26 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-08-06 09:00:17 2026-08-07 09:00:53 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-08-06 07:00:15 2026-08-07 07:00:53 attacker malicious-activity
Suspicious Host AbuseIPDB 2025-04-10 23:59:47 2026-04-29 16:43:06 anomalous-activity
HTTP Spammer StopForumSpam.com 2017-10-15 19:12:29 2025-08-16 14:41:12 malicious-activity
VPN IPWhois.io 2025-06-11 22:49:07 2025-06-15 03:29:01 anonymization
Proxy IPWhois.io 2025-05-02 14:10:06 2025-05-02 14:10:06 anonymization
HTTP Spammer Sblam 2024-05-17 00:52:28 2024-05-17 01:17:24 malicious-activity
Proxy FireHOL 2023-09-18 02:51:08 2023-09-27 02:48:52 anonymization
HTTP Spammer Cleantalk.org 2017-11-30 13:18:36 2017-11-30 13:18:36

Tags

anonymization bot abuse attacker spam bruteforce apache ddos rfi login joomla wordpress

Whois information

AS name
AS206092 Logicweb Inc.
AS registry
arin
AS date
2010-05-06 00:00:00
AS CIDR
173.239.208.0/20
CIDR
173.239.192.0/18
Registrant
Logicweb Inc.
Address
4509 Steeplechase Dr.
City
Zürich
State
PA
Postal code
8001
Country
CH — Switzerland 🇨🇭
Contact email
[email protected], [email protected]
First indexed
2017-10-15 19:12:29
Last updated
2026-08-11 08:00:33

Malicious IPs in the same CIDR

173.239.221.8 173.239.216.4 173.239.214.2 173.239.214.10 173.239.214.17 173.239.214.13 173.239.214.14 173.239.214.15 173.239.214.16 173.239.214.12 173.239.214.18 173.239.214.5 173.239.214.6 173.239.216.21 173.239.216.12 173.239.216.3 173.239.216.13 173.239.220.5 173.239.216.20 173.239.216.25 173.239.216.26 173.239.216.28