199.165.159.192
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS22168
- Hostname(s)
- scan-86-7.shadowserver.io
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- San Jose, California
Abuse Reports
Total reports
80 from
58 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Tman111 |
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior.
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/30005)
|
Port Scan | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:5665) [srv2]
|
Port Scan Hacking | |
| 🇮🇩 helouism |
Fail2Ban: Blocked by UFW for port scanning.
|
Port Scan DDoS Attack | |
| Anonymous |
Blocked by firewall on hugin [3001/tcp] | Rule: Blocklist | SPT: 41984 | TTL: 238 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Altai |
Blocked by UFW on Jellyfin [5985/tcp]
Source port: 38457
TTL: 236
Packet length: 40
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
5665/tcp (1 or more attempts)
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 RAP |
2026-10-28 00:21:12 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇷🇺 dnsbd.tech |
nftables: Port scan (TCP:1962) [srv1]
|
Port Scan Hacking | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-27 14:28:40 UTC Unauthorized activity to TCP port 445. SMB
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Bad Web Bot Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Incoming HTTP traffic on port 81
|
Web App Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown