199.217.99.189 Threat Intelligence - United States | IP Address Lookup

Share on:

General

IP Address
199.217.99.189
IPv4 Address
Location
🇺🇸 Dublin, United States
US
Network
AS399629
BL Networks
Threat Score
75/100
High Risk
APTbl networksC2caddycaddy proxycastleloadercopycve20243721 cve
Attack Intelligence
MITRE ATT&CK Techniques
T1016 - System Network Configuration Discovery, T1018 - Remote System Discovery, T1027 - Obfuscated Files or Information, T1033 - System Owner/User Discovery, T1057 - Process Discovery, T1059.001 - PowerShell, T1059.007 - JavaScript, T1059 - Command and Scripting Interpreter, T1071.001 - Web Protocols, T1082 - System Information Discovery, T1090 - Proxy, T1102 - Web Service, T1105 - Ingress Tool Transfer, T1132 - Data Encoding, T1140 - Deobfuscate/Decode Files or Information, T1204 - User Execution, T1497.001 - System Checks, T1518.001 - Security Software Discovery, T1566 - Phishing, T1571 - Non-Standard Port, T1573 - Encrypted Channel
Noticed
4 times
Protocols Attacked
exit
Countries Attacked
Russian Federation, United States of America
Open Ports Detected
2244380
Geographic Location
Country
United States
City
Dublin
Region
Ohio
Coordinates
40.1104, -83.1131
Network Information
ASN
AS399629
Organization
BL Networks
Network
AS399629 BL Networks
Associated CVEs
WHOIS Information
NetRange
199.217.98.0 - 199.217.99.255
CIDR
199.217.98.0/23
NetName
BNL-77
NetHandle
NET-199-217-98-0-1
Parent
NET199 (NET-199-0-0-0-0)
NetType
Direct Allocation
Organization
BL Networks (BNL-77)
RegDate
2025-09-22
Updated
2025-09-24
Comment
Geofeed https://geoip.blnwx.com/csv
Ref
https://rdap.arin.net/registry/ip/199.217.98.0
OrgName
BL Networks
OrgId
BNL-77
Address
30 N Gould St
City
Sheridan
StateProv
WY
PostalCode
82801
Country
US
OrgAbuseHandle
ADMIN7234-ARIN
OrgAbuseName
Admin
OrgAbusePhone
+1-307-317-1097
OrgAbuseEmail
admin@blnwx.com
OrgAbuseRef
https://rdap.arin.net/registry/entity/ADMIN7234-ARIN
OrgTechHandle
ADMIN7234-ARIN
Attack Logs
DateTarget LocationProtocolLink
2026-09-30 Tor Exit Node Ip List 2026 09 30 Multiple View Log
2026-09-29 Tor Exit Node Ip List 2026 09 29 Multiple View Log
2026-09-28 Tor Exit Node Ip List 2026 09 28 Multiple View Log
2026-09-27 Tor Exit Node Ip List 2026 09 27 Multiple View Log
Additional Intelligence
Tor Exit Node
Yes
Disclaimer
This page contains threat intelligence information for the IPv4 address 199.217.99.189 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.