199.195.249.97
Classification: Malicious
199.195.249.97 is a malicious IP address in New York City, US. 502 sightings from 7 threat sources (HTTP Attacker, DDoS Attacker), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-05-08 01:56:08 | 2026-10-17 08:04:34 | anonymization vpn | |
| Mail Spammer | Barracuda | 2024-03-01 09:14:52 | 2026-10-17 08:04:34 | attacker malicious-activity | |
| Proxy | IPWhois.io | 2025-04-26 13:06:21 | 2025-11-18 00:29:12 | anonymization | |
| DDoS Attacker | Blocklist.net.ua | 2025-04-26 22:23:28 | 2025-10-25 11:32:37 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2025-04-24 00:00:14 | 2025-07-03 02:02:06 | anomalous-activity | |
| HTTP Attacker | AbuseIPDB | 2025-04-23 19:50:17 | 2025-06-10 00:03:04 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-04-26 22:27:00 | 2025-05-26 02:45:08 | compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-04-23 20:47:56 | 2025-05-24 00:00:09 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-04-23 10:50:04 | 2025-05-23 07:00:11 | anomalous-activity | |
| Port Scanner | AbuseIPDB | 2025-04-29 03:06:19 | 2025-05-21 10:55:31 | anomalous-activity | |
| Hacking | AbuseIPDB | 2025-04-23 19:50:17 | 2025-05-20 15:58:24 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2025-04-26 13:06:17 | 2025-05-20 11:13:37 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2025-04-26 12:13:33 | 2025-05-20 10:13:27 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2025-05-19 03:05:55 | 2025-05-19 03:05:55 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-05-10 07:33:44 | 2025-05-10 07:33:44 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2025-05-06 15:00:50 | 2025-05-06 15:00:50 | malicious-activity | |
| Malicious Host | CIArmy | 2024-03-01 09:14:51 | 2024-03-20 12:58:29 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2024-03-01 09:14:52 | 2024-03-01 09:14:52 |
Tags
apache ddos rfi attacker login bruteforce bot joomla wordpress abuseWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2024-03-01 09:14:51
- Last updated
- 2026-10-17 08:04:35
Malicious IPs in the same CIDR
199.195.252.209 199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.254.231 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198