69.164.206.96
Classification: Malicious
69.164.206.96 is a malicious IP address in Plano, US. Linked to Revil malware. 57 sightings from 6 threat sources (Proxy, Mail Spammer), last seen 2026-09-24.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: REVIL (S0496)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Anonymizer | FireHOL | 2026-09-24 18:42:05 | 2026-09-24 18:42:05 | anomalous-activity anonymization | |
| Mail Spammer | Barracuda | 2019-05-09 06:45:18 | 2026-09-22 00:50:19 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2025-06-16 07:07:19 | 2026-09-22 00:50:18 | anonymization proxy | |
| Proxy | FireHOL | 2023-07-29 20:53:45 | 2026-09-21 19:59:11 | anomalous-activity anonymization proxy | |
| HTTP Spammer | StopForumSpam.com | 2023-07-27 22:13:49 | 2023-10-09 00:26:25 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2023-08-14 03:13:00 | 2023-08-15 03:12:25 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2023-08-14 03:05:35 | 2023-08-15 03:05:31 | malicious-activity | |
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2019-11-28 16:45:04 | 2019-11-28 16:45:05 | S0496 REvil | |
| Gen:Variant.Ser.Razy | Hybrid-Analysis | 2019-05-09 06:45:18 | 2019-05-09 06:45:18 |
Tags
bot abuse anonymization mail spam attacker imap pop3 saslWhois information
- AS name
- AS63949 Linode
- AS registry
- arin
- AS date
- 2009-05-15 00:00:00
- AS CIDR
- 69.164.192.0/20
- CIDR
- 69.164.192.0/19
- Registrant
- Linode
- Address
- 329 E. Jimmie Leeds Road Suite A
- City
- Plano
- State
- TX
- Postal code
- 75026
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2019-05-09 06:45:18
- Last updated
- 2026-09-24 18:42:05
Malicious IPs in the same CIDR
69.164.192.75 69.164.192.155 69.164.194.19 69.164.192.186 69.164.206.96