JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

199.165.159.95

Recent Activity

Abuse confidence score ?

100% Critical

75 reports

55 reporters · latest 1 hour ago

ISP	The Shadowserver Foundation, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22168
Hostname(s)	scan-62-6.shadowserver.io
Domain Name	shadowserver.org
Country	🇺🇸 United States of America
City	San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 199.165.159.95

Export CSV

This IP address has been reported a total of 75 times from 55 distinct sources. 199.165.159.95 was first reported on October 24th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 19 reports; Germany with 16 reports; Netherlands with 7 reports. The most common categories in these recent reports were: Port Scan 67 times; Hacking 13 times; Brute-Force 10 times; Web App Attack 4 times; Exploited Host 4 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-10-26 13:53:54 (1 hour ago)	TSEC Honeypot Network report. Threat score: 96/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 96/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah. Context: 199.165.159.95 classified as automated brute-force attacker targeting SSH/Telnet credentials (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 xmission.com	2026-10-26 13:32:42 (1 hour ago)	Blocked by UFW (TCP on 5801) Source port: 46437 TTL: 247 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5801) Source port: 46437 TTL: 247 Packet length: 40 TOS: 0x08 This report (for 199.165.159.95) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-26 13:32:08 (1 hour ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential VNC Scan 5800-5820	Port Scan
🇫🇮 Maxetow	2026-10-26 13:28:44 (1 hour ago)	Scan port: 4369 \| 1 total \| size=40B	Port Scan
🇩🇪 xserverx.ru	2026-10-26 13:13:08 (1 hour ago)	[UFW SCAN!!!!] SRC=199.165.159.95 LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=37573 DPT=1911 WIN ... show more [UFW SCAN!!!!] SRC=199.165.159.95 LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=37573 DPT=1911 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 noconex	2026-10-26 13:01:36 (1 hour ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential VNC Scan 5800-5820) de 199.165.15 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential VNC Scan 5800-5820) de 199.165.159.95 [TCP] show less	Port Scan Brute-Force SSH
🇳🇵 radheykrishna.com.np	2026-10-26 12:14:03 (2 hours ago)	Oct 26 17:59:02 kernel: [1922036.281045] [UFW BLOCK] IN=ens160 OUT= SRC=199.165.159.95 LEN=40 TOS=0x ... show more Oct 26 17:59:02 kernel: [1922036.281045] [UFW BLOCK] IN=ens160 OUT= SRC=199.165.159.95 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=43527 DPT=7900 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 RAP	2026-10-26 11:04:17 (3 hours ago)	2026-10-26 11:04:17 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇩🇪 acadeova	2026-10-26 09:50:40 (5 hours ago)	Blocked by UFW on vps4 [24156/tcp] Source port: 55134 TTL: 244 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on vps4 [24156/tcp] Source port: 55134 TTL: 244 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-10-26 09:06:58 (5 hours ago)	Blocked by UFW (TCP on 8111) Source port: 45469 TTL: 247 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8111) Source port: 45469 TTL: 247 Packet length: 40 TOS: 0x08 This report (for 199.165.159.95) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 NetVexor	2026-10-26 08:56:01 (6 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-10-26 08:30:37 (6 hours ago)	Blocked by UFW (TCP on 9000) Source port: 52601 TTL: 247 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9000) Source port: 52601 TTL: 247 Packet length: 40 TOS: 0x08 This report (for 199.165.159.95) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 hxsain	2026-10-26 07:00:35 (7 hours ago)	Blocked by UFW on fr2 [1000/tcp] \| SPT: 38769 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on fr2 [1000/tcp] \| SPT: 38769 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 David Ferneding	2026-10-26 06:57:16 (8 hours ago)	Blocked by UFW (TCP on 9100) Source port: 53460 TTL: 236 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9100) Source port: 53460 TTL: 236 Packet length: 40 TOS: 0x08 This report (for 199.165.159.95) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 RoboSOC	2026-10-26 06:36:13 (8 hours ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: scan-62-6.shadowserver.io.	Port Scan

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.159.90.90

🇵🇰 154.192.120.16

🇸🇬 134.185.88.23

🇺🇸 98.190.40.102

🇷🇺 31.40.146.255

🇧🇷 16.5.0.182

🇧🇷 2804:4028:109:7101:d15:513c:2b9c:4b36

🇹🇳 197.5.145.102

🇳🇱 185.136.15.80

🇺🇸 174.85.169.109

🇺🇸 168.100.149.130

🇩🇪 167.94.145.23

🇸🇬 165.154.236.104

🇺🇸 136.226.49.85

🇺🇸 50.6.206.236

🇵🇪 38.250.131.23

🇨🇱 186.79.129.132

🇳🇱 185.223.235.54

🇨🇦 172.70.80.105

🇨🇳 119.23.110.193