AbuseIPDB » 199.165.159.14
199.165.159.14 was found in our database!
This IP was reported 49 times. Confidence of Abuse is 100%: ?
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS22168 |
| Hostname(s) |
scan-91-5.shadowserver.io |
| Domain Name | shadowserver.org |
| Country | ๐บ๐ธ United States of America |
| City | San Jose, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 199.165.159.14:
This IP address has been reported a total of 49 times from 38 distinct sources. 199.165.159.14 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| ๐ท๐บ akokarev |
MikroTik autoban
|
Port Scan | ||
| ๐บ๐ธ xmission.com |
|
Port Scan | ||
| ๐บ๐ธ RAP |
2026-10-23 09:14:09 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | ||
| ๐ฉ๐ช Tsumugi Kotobuki |
|
Port Scan Hacking | ||
| ๐จ๐ญ SOC [GOLINE SA] |
|
SSH Brute-Force | ||
| ๐บ๐ธ xmission.com |
|
Port Scan | ||
| ๐บ๐ธ donarev419 |
Connection to port 7047 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| ๐ฉ๐ช reznekcs |
Blocked by UFW firewall
|
Brute-Force | ||
| Anonymous |
20000/tcp (1 or more attempts)
|
Port Scan | ||
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (255 bytes of payload); 2600 [1] TCP
|
Port Scan | ||
| ๐บ๐ธ shabi |
UFW Blocked [65422/TCP]
Source: 199.165.159.14:40062
TTL: 243
Lenth: 44
TOS: 0x00
|
Port Scan | ||
| ๐บ๐ธ donarev419 |
Connection to port 8015 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| ๐ท๐บ dnsbd.tech |
nftables: Port scan (TCP:4434) [srv1]
|
Port Scan Hacking | ||
| ๐บ๐ธ xmission.com |
|
Port Scan | ||
| ๐ฉ๐ช Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan |
Showing 1 to 15 of 49 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐ฉ