199.195.249.231
Classification: Malicious
199.195.249.231 is a malicious IP address in New York City, US. 495 sightings from 6 threat sources (HTTP Attacker, DDoS Attacker), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-01-24 14:46:19 | 2026-10-18 17:20:29 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-02-13 15:45:37 | 2026-10-03 21:40:15 | anonymization vpn | |
| Empty reason | Blocklist.net.ua | 2026-09-04 17:23:56 | 2026-09-11 17:26:16 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-01-26 17:33:35 | 2026-03-12 04:46:10 | compromised malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-01-28 07:53:25 | 2026-02-22 05:02:12 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-01-28 06:53:11 | 2026-02-22 03:03:00 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-01-22 04:26:42 | 2026-02-13 15:22:22 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-01-22 10:55:14 | 2026-02-13 07:05:27 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-01-22 10:55:14 | 2026-02-13 07:05:27 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-01-24 15:14:20 | 2026-02-12 05:27:35 | anomalous-activity | |
| Port Scanner | AbuseIPDB | 2026-01-22 18:23:30 | 2026-02-09 01:48:15 | anomalous-activity | |
| Suspicious Host | AbuseIPDB | 2026-01-23 03:15:11 | 2026-01-27 23:42:16 | anomalous-activity | |
| DDoS attack on site akit.ua | Blocklist.net.ua | 2022-08-16 03:27:41 | 2023-04-11 08:13:43 | malicious-activity | |
| HTTP Spammer | Sblam | 2022-08-11 03:22:18 | 2022-09-29 01:23:57 | malicious-activity | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2022-08-02 02:39:11 | 2022-09-11 03:01:51 | anonymization | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2022-08-02 02:38:15 | 2022-09-11 03:00:10 | anonymization | |
| SSH Attacker | Blocklist.de | 2022-08-22 02:00:08 | 2022-08-27 02:04:09 | malicious-activity |
Tags
abuse bot tor anonymization ssh bruteforce apache ddos rfi attacker login joomla wordpressWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2022-08-02 02:38:15
- Last updated
- 2026-10-18 17:20:29
Malicious IPs in the same CIDR
199.195.252.209 199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.254.231 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198