JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.195.249.11

199.195.249.11 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 72%: ?

72%

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	4.zlabs.dev
Domain Name	frantech.ca
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.195.249.11

Whois 199.195.249.11

IP Abuse Reports for 199.195.249.11:

This IP address has been reported a total of 98 times from 44 distinct sources. 199.195.249.11 was first reported on December 21st 2020, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kot	2026-06-26 15:01:37 (7 hours ago)	scan port 22, 199.195.249.11 block	Port Scan
🇷🇴 abuse_IP_reporter	2026-06-26 11:45:12 (10 hours ago)	Jun 26 14:05:52 server UFW BLOCK SRC=199.195.249.11 PROTO=TCP SPT=46897 DPT=5061	Port Scan
Anonymous	2026-06-26 11:05:19 (11 hours ago)	Jun 26 06:27:15 localhost kernel: [110814905.059871] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 26 06:27:15 localhost kernel: [110814905.059871] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=199.195.249.11 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=41044 PROTO=TCP SPT=46897 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 26 06:27:15 localhost kernel: [110814905.059891] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=199.195.249.11 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=41044 PROTO=TCP SPT=46897 DPT=5061 SEQ=2878329839 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (02040218) Jun 26 07:05:18 localhost kernel: [110817187.995424] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=199.195.249.11 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=16457 PROTO=TCP SPT=46897 DPT=5060 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 26 07:05:18 localhost kernel: [110817187.995433] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=199.195.249.11 DST=[mung show less	Port Scan
🇺🇸 cwytech	2026-06-26 10:39:18 (11 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇺🇸 cazae	2026-06-26 10:31:03 (12 hours ago)	Unauthorized attempt on debian [5061/tcp] Source port: 46897 TTL: 241 Packet length: 44 TOS: 0x00 h ... show more Unauthorized attempt on debian [5061/tcp] Source port: 46897 TTL: 241 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Fraud VoIP
🇫🇷 security.rdmc.fr	2026-06-26 10:22:13 (12 hours ago)	Port Scan Attack proto:TCP src:46897 dst:5061	Port Scan
Anonymous	2026-06-26 10:14:11 (12 hours ago)	2026-06-26T11:14:11.109898+01:00 vps kernel: [44208995.721155] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-26T11:14:11.109898+01:00 vps kernel: [44208995.721155] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=199.195.249.11 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=24204 PROTO=TCP SPT=46897 DPT=5060 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇮 6kilowatti	2026-06-26 10:01:29 (12 hours ago)	2026-06-26T13:01:28.915604+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-26T13:01:28.915604+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=199.195.249.11 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=30182 PROTO=TCP SPT=46897 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 Arpan Sen	2026-06-26 09:56:16 (12 hours ago)	Network port/address scan: probed 2 distinct port(s) across 59 host(s); 100% of connections received ... show more Network port/address scan: probed 2 distinct port(s) across 59 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇳🇱 VMHeaven.io	2026-06-26 09:51:46 (12 hours ago)	Blocked by UFW [5060/tcp] Source port: 46897 TTL: 247 Packet length: 44	Port Scan
🇫🇷 zulzeen	2026-06-26 09:44:15 (12 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SIP/VoIP Attack)	Fraud VoIP Brute-Force
🇺🇸 [email protected]	2026-06-26 06:28:37 (16 hours ago)	ASN: AS53667 FranTech Solutions. Country: US. Ports: 5060,5061. Proto: TCP. Observations: 2. AbuseSc ... show more ASN: AS53667 FranTech Solutions. Country: US. Ports: 5060,5061. Proto: TCP. Observations: 2. AbuseScore: 63/100 show less	Port Scan
🇩🇪 OpusX	2021-03-26 13:11:21 (5 years ago)	2021-03-26T18:09[Censored Hostname] sshd[30318]: Invalid user psybnc from 199.195.249.11 port 55410 ... show more 2021-03-26T18:09[Censored Hostname] sshd[30318]: Invalid user psybnc from 199.195.249.11 port 55410 2021-03-26T18:09[Censored Hostname] sshd[30318]: Failed password for invalid user psybnc from 199.195.249.11 port 55410 ssh2 2021-03-26T18:11[Censored Hostname] sshd[30331]: Invalid user admin from 199.195.249.11 port 53040[...] show less	Brute-Force SSH
Anonymous	2021-03-26 13:10:54 (5 years ago)	$f2bV_matches	Brute-Force
Anonymous	2021-03-26 13:10:23 (5 years ago)	(sshd) Failed SSH login from 199.195.249.11 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 199.195.249.11 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Mar 26 12:58:58 server5 sshd[9177]: Invalid user psybnc from 199.195.249.11 Mar 26 12:58:58 server5 sshd[9177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.249.11 Mar 26 12:59:00 server5 sshd[9177]: Failed password for invalid user psybnc from 199.195.249.11 port 39046 ssh2 Mar 26 13:10:18 server5 sshd[14140]: Invalid user admin from 199.195.249.11 Mar 26 13:10:18 server5 sshd[14140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.249.11 show less	Brute-Force

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 45.131.195.181

🇦🇲 195.250.79.2

🇺🇸 172.235.41.110

🇸🇪 155.212.108.78

🇺🇸 108.181.56.189

🇺🇸 108.6.249.123

🇰🇷 58.141.91.2

🇳🇱 45.148.10.152

🇺🇸 45.131.195.180

🇺🇸 44.133.249.226

🇬🇧 35.203.210.158

🇰🇷 211.216.58.204

🇺🇸 192.169.201.223

🇨🇳 163.177.76.83

🇺🇸 162.216.150.237

🇺🇸 154.39.30.91

🇰🇷 106.243.155.71

🇸🇬 94.231.206.159

🇱🇹 91.224.92.87

🇺🇸 45.131.195.176