199.195.252.235
Classification: Malicious
199.195.252.235 is a malicious IP address in New York City, US. 445 sightings from 5 threat sources (Port Scanner, HTTP Attacker), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
- Open proxy — Provides anonymization that can hide an attacker.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-10-17 11:18:07 | 2026-10-18 11:18:45 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-10-17 11:18:06 | 2026-10-18 11:18:43 | malicious-activity | |
| VPN | IPWhois.io | 2025-02-17 10:09:10 | 2026-10-17 02:27:44 | anonymization vpn | |
| Port Scanner | AbuseIPDB | 2026-10-15 20:34:28 | 2026-10-17 02:11:11 | malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-10-15 21:11:58 | 2026-10-17 02:08:28 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-10-15 21:44:41 | 2026-10-17 01:54:51 | anomalous-activity | |
| HTTP Attacker | AbuseIPDB | 2026-10-15 20:39:17 | 2026-10-17 01:54:51 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-10-15 22:40:00 | 2026-10-17 01:17:21 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-10-16 02:02:38 | 2026-10-17 01:17:21 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-10-16 18:00:46 | 2026-10-16 18:00:46 | iot malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-10-16 16:41:52 | 2026-10-16 16:41:52 | malicious-activity reconnaissance | |
| DDoS Attacker | AbuseIPDB | 2026-10-16 00:12:32 | 2026-10-16 09:38:25 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2024-11-11 23:15:32 | 2026-10-16 06:59:12 | attacker compromised malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-10-16 05:07:09 | 2026-10-16 05:07:09 | attacker malicious-activity | |
| Proxy | AbuseIPDB | 2026-10-15 22:23:34 | 2026-10-15 22:23:34 | anonymization proxy | |
| DDoS Attacker | Blocklist.net.ua | 2024-11-10 18:29:19 | 2025-05-10 21:14:41 | malicious-activity | |
| Proxy | IPWhois.io | 2025-03-13 01:10:20 | 2025-03-23 20:55:59 | anonymization | |
| Bruteforce login attacker | Blocklist.de | 2024-11-08 09:56:44 | 2024-12-04 09:51:43 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2024-11-08 09:14:08 | 2024-12-04 09:12:43 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-11-08 00:18:49 | 2024-11-10 23:01:57 | anomalous-activity |
Tags
apache ddos rfi attacker login bruteforce bot joomla wordpress abuseWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2024-11-08 04:00:04
- Last updated
- 2026-10-18 11:18:59
Malicious IPs in the same CIDR
199.195.252.209 199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.254.231 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198