199.165.159.153
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- The Shadowserver Foundation, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS22168
- Hostname(s)
- scan-82-0.shadowserver.io
- Domain Name
- shadowserver.org
- Country
- 🇺🇸 United States of America
- City
- San Jose, California
Abuse Reports
Total reports
1,308 from
339 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 donarev419 |
Connection to port 403 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇩🇪 OiledAmoeba |
2026-11-14T05:14:15.771282+01:00 mout.ruhnke.cloud sshd-session[13839]: banner exchange: Connection from 199.165.159.153 port 43732: invalid format
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/20020
|
Port Scan | |
| 🇸🇬 drewf.ink |
[03:48] Probed an open proxy (direct request to the proxy port)
|
Open Proxy | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /geoserver/web/ | seen at 2026-11-14 03:19:39.638 |
|
Web App Attack | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇺🇸 MPL |
tcp/8030 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 8040 with data transfer.
Data preview: GET / HTTP/1.1
Host: 107.175.212.44:8040
User-Agent: Mozilla/5.0 (iPad; CPU OS 15_7 like Mac OS X)
|
Port Scan Hacking | |
| 🇵🇱 sefinek.net |
Honeypot hit: Unauthorized traffic (128 bytes of payload); 3333 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 1080 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:1080
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7
|
Port Scan Hacking | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | |
| 🇧🇷 diego |
[probe-68-69] 2026-11-14 00:18:49, Client: 199.165.159.153, Protocol: 6, Unauthorized activity to HTTP: GET /api/v2/static/not.found
|
Web App Attack | |
| 🇧🇷 diego |
[probe-68-69] 2026-11-14 00:02:27, Client: 199.165.159.153, Protocol: 6, Unauthorized activity to HTTP: GET /
|
Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇪🇸 Gem |
Unauthorized web scan.
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown