199.195.251.78
Classification: Malicious
199.195.251.78 is a malicious IP address in New York City, US. Linked to Jss Loader malware. 584 sightings from 11 threat sources, last seen 2026-10-16.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: JSS LOADER (S0648)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2023-04-27 17:00:08 | 2026-10-16 11:30:07 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-09-26 05:48:00 | 2026-09-26 05:48:00 | anonymization vpn | |
| TOR Node | IPWhois.io | 2025-02-09 10:20:51 | 2025-03-02 22:11:19 | anonymization | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2023-04-22 12:23:39 | 2025-03-02 16:09:13 | anonymization | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2023-04-22 12:20:43 | 2025-03-02 15:59:51 | anonymization | |
| Suspicious Host | AbuseIPDB | 2024-08-01 04:06:04 | 2025-02-26 22:00:16 | anomalous-activity | |
| Hacking | AbuseIPDB | 2024-11-27 19:12:36 | 2025-02-21 22:29:49 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-11-25 05:10:25 | 2025-02-21 22:29:49 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-11-25 05:10:25 | 2025-02-21 22:29:49 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2024-11-23 22:00:11 | 2025-02-20 22:00:16 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-11-25 05:10:25 | 2025-02-18 20:24:39 | anomalous-activity | |
| SQL Injection | AbuseIPDB | 2024-12-13 16:28:12 | 2025-02-16 00:02:08 | malicious-activity | |
| HTTP bot | Blocklist.de | 2023-08-31 02:48:55 | 2025-02-09 10:20:49 | malicious-activity | |
| TOR Exit Node | TorProject.org | 2023-07-28 04:37:29 | 2025-02-09 09:43:47 | anonymization | |
| HTTP Spammer | Sblam | 2023-08-21 20:27:08 | 2025-02-08 18:21:11 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-11-26 01:23:37 | 2024-12-10 10:04:58 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2024-07-02 10:03:16 | 2024-12-10 00:46:02 | compromised malicious-activity | |
| DDoS Attacker | Blocklist.net.ua | 2023-06-21 08:12:23 | 2024-06-21 10:18:44 | malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2024-02-18 02:23:13 | 2024-03-22 02:43:04 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2024-02-18 01:59:29 | 2024-03-22 02:07:11 | malicious-activity | |
| Malicious Host | HoneyDB | 2023-04-23 00:00:00 | 2023-07-27 00:00:00 | malicious-activity | |
| HTTP Spammer | Cleantalk.org | 2023-04-21 08:36:40 | 2023-04-21 08:36:40 | malicious-activity | |
| JSSLoader | ThreatFox Abuse.ch | 2022-06-27 08:18:57 | 2022-06-29 07:29:32 | malicious-activity | S0648 JSS Loader |
Tags
tor anonymization bot abuse attacker spam bruteforce jssloader port:443 apache ddos rfi login joomla wordpressWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2022-06-27 08:18:57
- Last updated
- 2026-10-16 11:30:07
Malicious IPs in the same CIDR
199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.254.231 199.195.252.209 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198