199.195.252.209
Classification: Malicious
199.195.252.209 is a malicious IP address in New York City, US. 2,459 sightings from 10 threat sources (Port Scanner, Malicious Host), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-07-30 11:15:27 | 2026-10-18 11:18:45 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-07-30 11:15:26 | 2026-10-18 11:18:43 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2019-12-28 08:09:54 | 2026-10-17 20:01:39 | attacker malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2020-09-18 03:48:22 | 2026-10-16 16:41:52 | attacker malicious-activity reconnaissance | |
| Malicious Host | HoneyDB | 2026-08-06 00:00:00 | 2026-10-13 00:00:00 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-07-29 19:14:48 | 2026-09-07 20:49:52 | anonymization vpn | |
| Port Scanner | AbuseIPDB | 2026-07-28 13:39:45 | 2026-09-07 20:44:31 | attacker malicious-activity reconnaissance | |
| Bruteforce | AbuseIPDB | 2026-07-28 15:30:24 | 2026-09-07 08:48:49 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-16 03:54:06 | 2026-09-06 19:51:41 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-01 01:02:47 | 2026-09-06 19:51:41 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-07-28 14:05:07 | 2026-09-06 19:51:41 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-07-28 13:39:45 | 2026-09-06 19:51:41 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-07-29 05:36:47 | 2026-09-06 11:02:58 | attacker compromised malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-07-29 06:28:53 | 2026-09-06 09:38:04 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-09-03 05:34:09 | 2026-09-03 05:34:09 | attacker malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-09-03 05:34:09 | 2026-09-03 05:34:09 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-02 07:56:36 | 2026-09-02 07:56:36 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-08-25 11:08:18 | 2026-08-25 11:08:18 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2020-11-30 08:46:45 | 2020-12-01 09:07:43 | ||
| Malicious Host | Alienvault Ip Reputation Database | 2020-01-24 00:11:14 | 2020-10-15 06:26:17 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2020-04-04 00:42:24 | 2020-04-04 00:42:24 | ||
| Scanning IPs | IBM X-Force Exchange | 2020-01-08 21:11:00 | 2020-03-25 11:15:00 |
Tags
abuse ssh bruteforce botWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10007
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2019-12-28 08:09:54
- Last updated
- 2026-10-18 11:18:59
Malicious IPs in the same CIDR
199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.254.231 199.195.252.209 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198