IP address


.050199.195.248.205benign.internet.survey.scan
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
AbuseIPDB
199.195.248.205 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-01-19 05:00:00.841000
Was present on blacklist at: 2026-01-17 05:00, 2026-01-18 05:00, 2026-01-19 05:00
CI Army
199.195.248.205 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-01-20 03:50:00.976000
Was present on blacklist at: 2026-01-18 03:50, 2026-01-19 03:50, 2026-01-20 03:50
Warden events (799)
2026-01-18
ReconScanning (node.4dc198): 156
ReconScanning (node.368407): 153
2026-01-17
ReconScanning (node.4dc198): 245
ReconScanning (node.368407): 245
DShield reports (IP summary, reports)
2026-01-18
Number of reports: 440
Distinct targets: 365
2026-01-19
Number of reports: 39
Distinct targets: 21
2026-01-20
Number of reports: 39
Distinct targets: 21
Origin AS
AS53667 - PONYNET
BGP Prefix
199.195.248.0/21
geo
United States, Staten Island
🕑 America/New_York
hostname
benign.internet.survey.scan
Address block ('inetnum' or 'NetRange' in whois database)
199.195.248.0 - 199.195.255.255
last_activity
2026-01-18 15:19:19
last_warden_event
2026-01-18 15:19:19
rep
0.05
reserved_range
0
Shodan's InternetDB
Open ports: 80
Tags: eol-product
CPEs: cpe:/a:f5:nginx:1.14.2
ts_added
2026-01-17 01:16:16.337000
ts_last_update
2026-01-28 01:16:20.304000

Warden event timeline

DShield event timeline

Presence on blacklists