199.165.159.21
| ISP | The Shadowserver Foundation, Inc. |
|---|---|
| Usage Type | Commercial |
| ASN | AS22168 |
| Hostname(s) | scan-92-4.shadowserver.io |
| Domain Name | shadowserver.org |
| Country | 🇺🇸 United States of America |
| City | Pleasanton, California |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 199.165.159.21
This IP address has been reported a total of 22 times from 14 distinct sources. 199.165.159.21 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 12 reports; France with 3 reports; Brazil with 1 report. The most common categories in these recent reports were: Port Scan 19 times; Hacking 4 times; Brute-Force 3 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| Anonymous |
unsolicited connect TCP dport 5988 (sport 43920)
|
Hacking | ||
| 🇺🇸 MPL |
tcp/3333
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇺🇸 MPL |
tcp ports: 8006,80 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 sefinek.net |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇺🇸 RAP |
2026-10-06 01:18:19 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | ||
| Anonymous |
|
Port Scan | ||
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack)
|
Brute-Force Hacking Port Scan | ||
| 🇺🇸 MPL |
tcp ports: 9200,8006 (5 or more attempts)
|
Port Scan | ||
| 🇧🇷 Host One |
T-Pot Honeypot alert: 1 malicious events (exploit_attempt) detected.
|
Hacking | ||
| Anonymous |
|
Port Scan Brute-Force | ||
| 🇮🇪 RoboSOC |
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: scan-92-4.shadowserver.io.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩