91.217.249.4

Classification: Malicious

91.217.249.4 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-05. Network: AS206092 Vpn Consumer Frankfurt, Germany.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-02-27 12:29:09 2026-09-05 16:33:41 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:35:54 2026-09-04 16:35:54 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-11-23 00:01:46 2026-06-06 09:41:32 anomalous-activity
Malicious Host AbuseIPDB 2026-04-21 18:26:12 2026-04-26 11:29:16 malicious-activity
VPN IPWhois.io 2025-02-20 07:56:10 2026-04-21 03:06:53 anonymization
HTTP Attacker AbuseIPDB 2026-01-21 20:46:53 2026-04-21 01:09:17 malicious-activity
Bruteforce AbuseIPDB 2026-01-24 00:37:18 2026-04-20 07:35:40 malicious-activity
Port Scanner AbuseIPDB 2026-03-08 17:26:38 2026-04-20 05:58:18 anomalous-activity
Hacking AbuseIPDB 2026-02-04 09:10:04 2026-04-20 05:58:18 malicious-activity
HTTP Scrapper AbuseIPDB 2026-01-24 00:37:18 2026-04-19 23:31:00 anomalous-activity
Mail Spammer Blocklist.de 2026-04-08 08:07:08 2026-04-09 08:04:18 malicious-activity
IMAP Attacker Blocklist.de 2026-04-08 07:04:16 2026-04-09 07:03:40 malicious-activity
SQL Injection AbuseIPDB 2026-02-04 09:10:04 2026-02-04 09:10:04 malicious-activity
SSH Attacker AbuseIPDB 2026-01-21 20:46:53 2026-01-28 05:26:03 malicious-activity
HTTP Spammer StopForumSpam.com 2024-08-18 23:56:47 2025-09-28 10:23:14 malicious-activity
HTTP Spammer Sblam 2025-08-27 06:38:53 2025-09-01 01:55:38 malicious-activity
Proxy IPWhois.io 2025-03-23 08:51:19 2025-03-23 08:51:19 anonymization

Tags

bot abuse attacker imap pop3 sasl mail spam

Whois information

AS name
AS206092 Vpn Consumer Frankfurt, Germany
AS registry
ripencc
AS date
2019-11-11 00:00:00
AS CIDR
91.217.249.0/24
Registrant
Vpn Consumer Frankfurt, Germany
City
Frankfurt
Postal code
60311
Country
DE — Germany 🇩🇪
First indexed
2024-08-18 23:56:47
Last updated
2026-09-05 16:33:41

Malicious IPs in the same CIDR

91.217.249.31 91.217.249.53 91.217.249.212 91.217.249.207 91.217.249.52 91.217.249.20 91.217.249.62 91.217.249.45 91.217.249.44 91.217.249.28 91.217.249.75 91.217.249.42 91.217.249.8 91.217.249.43 91.217.249.205 91.217.249.221 91.217.249.71 91.217.249.200 91.217.249.204 91.217.249.208 91.217.249.209 91.217.249.211 91.217.249.214 91.217.249.227 91.217.249.7