199.195.254.198
Classification: Malicious
199.195.254.198 is a malicious IP address in New York City, US. 1,291 sightings from 7 threat sources (Port Scanner, Bruteforce), last seen 2026-10-03.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-07-29 21:56:07 | 2026-10-03 03:59:39 | anonymization vpn | |
| Port Scanner | AbuseIPDB | 2026-07-28 10:32:30 | 2026-10-03 01:07:28 | attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-07-28 10:32:30 | 2026-10-03 01:07:28 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-07-28 14:08:55 | 2026-10-02 22:34:16 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-07-28 10:32:30 | 2026-10-02 22:34:16 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-01 00:00:00 | 2026-10-01 00:00:00 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-20 03:50:03 | 2026-09-13 11:08:04 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2026-07-29 20:06:13 | 2026-09-03 20:04:18 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-08 00:00:14 | 2026-09-03 01:00:28 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-07-30 11:15:28 | 2026-09-02 09:16:47 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-07-30 11:15:26 | 2026-09-02 09:16:46 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-07-29 00:23:52 | 2026-08-19 22:31:29 | attacker compromised malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-13 03:09:06 | 2026-08-19 03:11:08 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-08-06 21:16:15 | 2026-08-06 21:16:15 | attacker malicious-activity | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2020-10-23 03:12:13 | 2020-11-03 09:45:26 | anonymization | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2020-10-23 03:11:15 | 2020-11-03 09:44:16 | anonymization | |
| TOR Exit Node | TorProject.org | 2020-10-22 04:30:07 | 2020-10-22 04:30:07 | ||
| Anonymizer | Maltiverse | 2020-10-22 03:42:02 | 2020-10-22 03:42:02 |
Tags
anonymizer torWhois information
- AS name
- AS53667 FranTech Solutions
- AS registry
- arin
- AS date
- 2012-06-06 00:00:00
- AS CIDR
- 199.195.248.0/21
- CIDR
- 199.195.248.0/21
- Registrant
- FranTech Solutions
- Address
- 1621 Central Ave
- City
- New York City
- State
- NY
- Postal code
- 10203
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2020-10-22 03:42:02
- Last updated
- 2026-10-03 03:59:41
Malicious IPs in the same CIDR
199.195.254.231 199.195.252.209 199.195.251.119 199.195.253.180 199.195.249.231 199.195.252.220 199.195.253.95 199.195.254.215 199.195.252.235 199.195.253.110 199.195.253.156 199.195.253.74 199.195.254.69 199.195.249.97 199.195.254.45 199.195.253.57 199.195.253.35 199.195.251.78 199.195.253.124 199.195.248.96 199.195.250.129 199.195.254.198