JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

199.165.159.46

Recent Activity

Abuse confidence score ?

100% Critical

104 reports

58 reporters · latest 23 minutes ago

ISP	The Shadowserver Foundation, Inc.
Usage Type	Commercial
ASN	AS22168
Hostname(s)	scan-95-5.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	Pleasanton, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 199.165.159.46

Export CSV

This IP address has been reported a total of 104 times from 58 distinct sources. 199.165.159.46 was first reported on October 6th 2026, and the most recent report was 23 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 41 reports; Germany with 19 reports; Finland with 6 reports. The most common categories in these recent reports were: Port Scan 88 times; Hacking 24 times; Brute-Force 11 times; Web App Attack 7 times; Bad Web Bot 4 times; Other 8 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-09 07:03:28 (23 minutes ago)	Blocked by firewall on hugin [9060/tcp] \| Rule: AbuseIPDB \| SPT: 39173 \| TTL: 241 \| LEN: 40 \| TOS: 0 ... show more Blocked by firewall on hugin [9060/tcp] \| Rule: AbuseIPDB \| SPT: 39173 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 donarev419	2026-10-09 06:16:53 (1 hour ago)	Connection to port 16993 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 xmission.com	2026-10-09 06:16:15 (1 hour ago)	Blocked by UFW (TCP on 16993) Source port: 58715 TTL: 246 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 16993) Source port: 58715 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 199.165.159.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 dnsbd.tech	2026-10-09 06:04:36 (1 hour ago)	nftables: Port scan (TCP:3000) [srv2]	Port Scan Hacking
🇩🇪 reznekcs	2026-10-09 05:01:56 (2 hours ago)	Blocked by UFW firewall	Brute-Force
🇺🇸 xmission.com	2026-10-09 04:54:04 (2 hours ago)	Blocked by UFW (TCP on 5665) Source port: 53348 TTL: 246 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5665) Source port: 53348 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 199.165.159.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-09 04:40:04 (2 hours ago)		Port Scan
🇦🇹 hxsain	2026-10-09 04:32:27 (2 hours ago)	Blocked by UFW on fr2 [12654/tcp] \| SPT: 44751 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on fr2 [12654/tcp] \| SPT: 44751 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-09 04:32:04 (2 hours ago)	Blocked by UFW (TCP on 12654) Source port: 60960 TTL: 246 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 12654) Source port: 60960 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 199.165.159.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 anycast_ac	2026-10-09 04:13:03 (3 hours ago)	Blocked by UFW on legacypanel [8020/tcp] \| SPT: 47257 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by ... show more Blocked by UFW on legacypanel [8020/tcp] \| SPT: 47257 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: FemboyHolding LTD show less	Port Scan
🇺🇸 drewf.ink	2026-10-09 03:49:38 (3 hours ago)	[03:49] Probed unrecognized Elasticsearch path via CONNECT 'www.shadowserver.org:443'	Hacking
Anonymous	2026-10-09 02:11:44 (5 hours ago)	2026-10-09T04:11:43.783492+02:00 vps kernel: [7882682.992768] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-09T04:11:43.783492+02:00 vps kernel: [7882682.992768] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=199.165.159.46 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=38094 DPT=23556 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇬🇧 sonot	2026-10-09 02:11:34 (5 hours ago)	Blocked by UFW on tunneluk01 [23556/tcp] \| SPT: 59444 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by ... show more Blocked by UFW on tunneluk01 [23556/tcp] \| SPT: 59444 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 David Ferneding	2026-10-09 02:11:31 (5 hours ago)	Blocked by UFW (TCP on 23556) Source port: 59583 TTL: 236 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 23556) Source port: 59583 TTL: 236 Packet length: 40 TOS: 0x00 This report (for 199.165.159.46) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 dnsbd.tech	2026-10-08 16:42:30 (14 hours ago)	nftables: Port scan (TCP:873) [srv2]	Port Scan Hacking

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.168.172.86

🇺🇸 167.172.232.142

🇲🇦 105.72.243.115

🇮🇩 103.158.250.26

🇱🇹 62.60.130.242

🇳🇱 45.74.31.170

🇺🇸 45.61.65.81

🇰🇷 20.194.96.114

🇺🇸 13.141.27.35

🇴🇲 5.36.225.65

🇬🇧 185.91.69.248

🇱🇾 165.16.5.62

🇺🇸 136.36.189.65

🇦🇺 130.155.133.98

🇨🇳 121.46.244.22

🇺🇸 87.99.156.204

🇸🇬 43.159.39.203

🇧🇪 35.195.51.30

🇹🇭 223.206.9.222

🇭🇰 101.36.119.203