199.165.159.102
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS22168
- Hostname(s)
- scan-63-5.shadowserver.io
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- San Jose, California
Abuse Reports
Total reports
114 from
72 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Drop from IP address 199.165.159.102 to tcp-port 1962
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3306)
Source port: 54884
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.102) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SQL Injection | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9642)
Source port: 35470
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.102) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 60000)
Source port: 43232
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.102) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
1793185537 - 10/28/2026 12:05:37 Host: 199.165.159.102/199.165.159.102 Port: 87 TCP Blocked
...
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| Anonymous |
Drop from IP address 199.165.159.102 to tcp-port 8080
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [9100/tcp]
Source port: 45834
TTL: 246
Packet length: 40
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9100)
Source port: 55297
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.102) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 donarev419 |
Connection to port 7900 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:7047) [srv2]
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-28 05:47:42 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| Anonymous |
8080/tcp (1 or more attempts)
|
Port Scan | |
| 🇹🇼 kk_it_man |
ET CINS Active Threat Intelligence Poor Reputation IP group 276
ET CINS Active Threat Intelligence Poor Reputation IP group 279
ET DROP Dshield Block Listed Source group 1
GPL RPC portmap listing UDP 111
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown