IP address

Search at other sites:
.198173.239.248.17
Shodan(more info)
Passive DNS
Tags:
IP blacklists
blocklist.de mail
173.239.248.17 was recently listed on the blocklist.de mail blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-19 16:05:00.425000
Was present on blacklist at: 2026-10-17 10:05, 2026-10-17 16:05, 2026-10-17 22:05, 2026-10-18 04:05, 2026-10-18 10:05, 2026-10-18 16:05, 2026-10-18 22:05, 2026-10-19 04:05, 2026-10-19 10:05, 2026-10-19 16:05
UCEPROTECT L1
173.239.248.17 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-21 23:45:00.665000
Was present on blacklist at: 2026-10-17 23:45, 2026-10-18 07:45, 2026-10-18 15:45, 2026-10-18 23:45, 2026-10-19 07:45, 2026-10-19 15:45, 2026-10-19 23:45, 2026-10-20 07:45, 2026-10-20 23:45, 2026-10-21 07:45, 2026-10-21 15:45, 2026-10-21 23:45

Threat categories

TLRoleCategoryDetails
50 src login protocol: smtp
port: 25, 465, 587
45 src —
Warden events (49)
2026-10-17
IntrusionUserCompromise (node.cfb4f7): 41
AttemptLogin (node.ce2b59): 8
Origin AS
AS212238 - CDNEXT
BGP Prefix
173.239.248.0/24
geo
Germany, Berlin
🕑 Europe/Berlin
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
173.239.192.0 - 173.239.255.255
last_activity
2026-10-17 20:48:11
last_warden_event
2026-10-17 20:48:11
rep
0.19780512466519629
reserved_range
0
Shodan's InternetDB
Open ports: 443, 1337, 6443, 8080, 64368
Tags: –
CPEs: –
ts_added
2026-10-17 09:08:02.405000
ts_last_update
2026-10-21 23:53:59.386000

Warden event timeline

DShield event timeline

Presence on blacklists