199.165.159.111
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS22168
- Hostname(s)
- scan-64-6.shadowserver.io
- Domain Name
- shadowserver.org
- Country
- ๐บ๐ธ United States of America
- City
- San Jose, California
Abuse Reports
Total reports
134 from
79 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ฉ๐ช chillcog.com |
Blocked by on honeypot [5432/tcp] | SPT: 42951 | TTL: 239 | LEN: 40 | TOS: 0x00 โข Reported by: abuse.terraforge.fun
|
Port Scan | |
| ๐บ๐ธ xmission.com |
Blocked by UFW (TCP on 20001)
Source port: 48283
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.111) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (243 bytes of payload); 5002 [1] TCP
|
Port Scan | |
| ๐ณ๐ฑ StopAbuse |
tcp/5002
|
Port Scan | |
| ๐ณ๐ฑ StopAbuse |
tcp/10514
|
Port Scan | |
| ๐ฎ๐ฑ Ilop |
[v5-99] Port scan: 3 packet(s) from 199.165.159.111 to 3 distinct destination ports (523,8001,5002) blocked at the perimeter (automated sensor)
|
Port Scan | |
| ๐ฉ๐ช Admins@Storch |
IPS:drop <match> dstport=17689
|
Brute-Force Exploited Host | |
| ๐ณ๐ฑ VMHeaven.io |
Blocked by UFW [5002/tcp]
Source port: 34095
TTL: 246
Packet length: 40
|
Port Scan | |
| ๐บ๐ธ xmission.com |
Blocked by UFW (TCP on 8088)
Source port: 54009
TTL: 247
Packet length: 40
TOS: 0x08
This report (for 199.165.159.111) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐บ๐ธ RAP |
2026-10-28 08:57:31 UTC Unauthorized activity to TCP port 8088. Web App
|
Port Scan Web App Attack | |
| ๐ฌ๐ง Andrew |
Blocked by UFW (TCP on port 25).
Source port: 36520
TTL: 241
Packet length: 40
TOS: 0x00
This report (for 199.165.159.111) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Email Spam | |
| ๐บ๐ธ donarev419 |
Connection to port 4433 with data transfer.
Data preview:
|
Port Scan Hacking | |
| ๐ฌ๐ง Nov |
Unauthorized access attempt (udp/389)
|
Port Scan | |
| ๐บ๐ธ demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.shadowserver.org:443
|
Open Proxy Port Scan | |
| ๐ญ๐ฐ ้น้น |
monitor: on ser162528253480 | port: 4786 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown