69.16.254.250

Classification: Malicious

69.16.254.250 is a malicious IP address in Lansing, US. 72 sightings from 6 threat sources (Proxy, HTTP Spammer), last seen 2026-09-24.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Anonymizer FireHOL 2026-09-24 18:39:41 2026-09-24 18:39:41 anomalous-activity anonymization
Proxy IPWhois.io 2025-02-14 12:56:47 2026-09-22 00:50:35 anonymization proxy
Mail Spammer Barracuda 2020-02-25 08:12:37 2026-09-22 00:50:35 attacker malicious-activity
Proxy FireHOL 2024-02-11 00:12:07 2026-09-21 19:56:44 anomalous-activity anonymization proxy
HTTP Spammer StopForumSpam.com 2024-02-17 18:47:26 2024-04-29 16:52:05 malicious-activity
Memcached Rapid7 Open Data 2020-10-05 16:19:52 2020-10-05 16:24:37
linkedin phishing Antiphishing.com.ar 2020-02-25 08:12:37 2020-02-25 08:12:37

Tags

phishing memcached reflection amplification anonymization bot abuse

Whois information

AS name
AS32244 Liquid Web, L.L.C
AS registry
arin
AS date
2005-05-26 00:00:00
AS CIDR
69.16.192.0/18
CIDR
69.16.192.0/18
Registrant
Liquid Web, L.L.C
Address
4210 Creyts Rd.
City
Lansing
State
MI
Postal code
48918
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
First indexed
2020-02-25 08:12:37
Last updated
2026-09-24 18:39:41

Malicious IPs in the same CIDR

69.16.208.95 69.16.254.250