199.165.159.105

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       199.165.159.0 - 199.165.159.255
CIDR:           199.165.159.0/24
NetName:        SSF-NET-SF401
NetHandle:      NET-199-165-159-0-1
Parent:         NET199 (NET-199-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   The Shadowserver Foundation, Inc. (SF-1051)
RegDate:        2026-07-02
Updated:        2026-07-02
Comment:        https://www.shadowserver.org
Ref:            https://rdap.arin.net/registry/ip/199.165.159.0



OrgName:        The Shadowserver Foundation, Inc.
OrgId:          SF-1051
Address:        4695 Chabot Dr. Suite 200
City:           Pleasanton
StateProv:      CA
PostalCode:     94588
Country:        US
RegDate:        2023-03-07
Updated:        2025-04-23
Ref:            https://rdap.arin.net/registry/entity/SF-1051


OrgAbuseHandle: ABUSE9292-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-408-740-7420 
OrgAbuseEmail:  abuse@shadowserver.org
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9292-ARIN

OrgTechHandle: NOC33598-ARIN
OrgTechName:   NOC
OrgTechPhone:  +1-408-740-7420 
OrgTechEmail:  noc@shadowserver.org
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC33598-ARIN

OrgNOCHandle: NOC33598-ARIN
OrgNOCName:   NOC
OrgNOCPhone:  +1-408-740-7420 
OrgNOCEmail:  noc@shadowserver.org
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC33598-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.165.159.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31230
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;199.165.159.105.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026110102 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 02 11:00:16 CST 2026
;; MSG SIZE  rcvd: 108

Host info

105.159.165.199.in-addr.arpa domain name pointer scan-64-0.shadowserver.io.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
105.159.165.199.in-addr.arpa	name = scan-64-0.shadowserver.io.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.119.83.12	attackspambots	spam (f2b h2)	2020-06-19 17:11:53
12.186.157.211	attackbotsspam	SSH login attempts.	2020-06-19 17:20:13
106.12.57.47	attack	Jun 19 08:11:27 abendstille sshd\[7859\]: Invalid user akash from 106.12.57.47 Jun 19 08:11:27 abendstille sshd\[7859\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.57.47 Jun 19 08:11:29 abendstille sshd\[7859\]: Failed password for invalid user akash from 106.12.57.47 port 37474 ssh2 Jun 19 08:16:13 abendstille sshd\[12855\]: Invalid user testuser from 106.12.57.47 Jun 19 08:16:13 abendstille sshd\[12855\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.57.47 ...	2020-06-19 17:15:10
142.169.1.45	attackspambots	SSH login attempts.	2020-06-19 17:29:47
194.169.191.59	attack	GET /cms/wp-includes/wlwmanifest.xml	2020-06-19 17:23:07
139.59.80.88	attack	Jun 19 08:25:20 pbkit sshd[62081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.80.88 Jun 19 08:25:20 pbkit sshd[62081]: Invalid user myuser1 from 139.59.80.88 port 35128 Jun 19 08:25:22 pbkit sshd[62081]: Failed password for invalid user myuser1 from 139.59.80.88 port 35128 ssh2 ...	2020-06-19 17:03:08
121.22.5.83	attackbots	$f2bV_matches	2020-06-19 17:01:18
23.94.93.119	attackspam	TCP (SYN) 23.94.93.119:44762 -> port 22, len 44	2020-06-19 17:05:39
5.15.52.123	attackbots	DATE:2020-06-19 05:54:42, IP:5.15.52.123, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-19 17:03:37
190.171.240.51	attackbotsspam	Invalid user tju1 from 190.171.240.51 port 37998	2020-06-19 17:22:27
98.136.96.92	attackbots	SSH login attempts.	2020-06-19 17:11:19
222.186.30.167	attackbots	Jun 19 11:13:19 santamaria sshd\[19352\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root Jun 19 11:13:20 santamaria sshd\[19352\]: Failed password for root from 222.186.30.167 port 16214 ssh2 Jun 19 11:13:26 santamaria sshd\[19356\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root ...	2020-06-19 17:13:51
201.192.152.202	attack	Jun 19 10:55:36 electroncash sshd[56357]: Invalid user remote from 201.192.152.202 port 49584 Jun 19 10:55:36 electroncash sshd[56357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.192.152.202 Jun 19 10:55:36 electroncash sshd[56357]: Invalid user remote from 201.192.152.202 port 49584 Jun 19 10:55:38 electroncash sshd[56357]: Failed password for invalid user remote from 201.192.152.202 port 49584 ssh2 Jun 19 10:59:10 electroncash sshd[57219]: Invalid user hafiz from 201.192.152.202 port 48958 ...	2020-06-19 17:10:01
222.186.61.19	attackbotsspam	firewall-block, port(s): 8080/tcp, 8081/tcp, 8082/tcp	2020-06-19 17:37:41
102.132.137.249	attackspambots	Jun 19 09:09:49 ns382633 sshd\[23671\]: Invalid user mars from 102.132.137.249 port 41594 Jun 19 09:09:49 ns382633 sshd\[23671\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.132.137.249 Jun 19 09:09:51 ns382633 sshd\[23671\]: Failed password for invalid user mars from 102.132.137.249 port 41594 ssh2 Jun 19 09:11:46 ns382633 sshd\[24264\]: Invalid user eas from 102.132.137.249 port 34968 Jun 19 09:11:46 ns382633 sshd\[24264\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.132.137.249	2020-06-19 17:16:44

Recently Reported IPs

216.25.90.90	201.79.0.110	101.32.218.225	58.221.133.38
45.61.188.202	112.226.217.255	66.249.76.166	54.166.203.225
13.200.55.36	221.215.140.46	117.39.43.3	124.133.119.158
117.94.187.75	35.232.76.162	209.74.85.137	20.40.232.119
47.92.238.53	188.166.37.56	178.62.230.129	20.118.27.138