城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 199.165.159.0 - 199.165.159.255
CIDR: 199.165.159.0/24
NetName: SSF-NET-SF401
NetHandle: NET-199-165-159-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: The Shadowserver Foundation, Inc. (SF-1051)
RegDate: 2026-07-02
Updated: 2026-07-02
Comment: https://www.shadowserver.org
Ref: https://rdap.arin.net/registry/ip/199.165.159.0
OrgName: The Shadowserver Foundation, Inc.
OrgId: SF-1051
Address: 4695 Chabot Dr. Suite 200
City: Pleasanton
StateProv: CA
PostalCode: 94588
Country: US
RegDate: 2023-03-07
Updated: 2025-04-23
Ref: https://rdap.arin.net/registry/entity/SF-1051
OrgAbuseHandle: ABUSE9292-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-740-7420
OrgAbuseEmail: abuse@shadowserver.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN
OrgTechHandle: NOC33598-ARIN
OrgTechName: NOC
OrgTechPhone: +1-408-740-7420
OrgTechEmail: noc@shadowserver.org
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
OrgNOCHandle: NOC33598-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-408-740-7420
OrgNOCEmail: noc@shadowserver.org
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.165.159.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.165.159.113. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102804 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 29 09:31:21 CST 2026
;; MSG SIZE rcvd: 108113.159.165.199.in-addr.arpa domain name pointer scan-65-0.shadowserver.io.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
113.159.165.199.in-addr.arpa name = scan-65-0.shadowserver.io.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.15.191.97 | attackbots | SSH login attempts. |
2020-06-19 19:22:53 |
| 179.225.165.247 | attackbots | Honeypot attack, port: 445, PTR: 179-225-165-247.user.vivozap.com.br. |
2020-06-19 18:57:30 |
| 183.82.121.34 | attackbotsspam | 2020-06-19T11:10:55.522194shield sshd\[29878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root 2020-06-19T11:10:57.726875shield sshd\[29878\]: Failed password for root from 183.82.121.34 port 52682 ssh2 2020-06-19T11:14:33.819022shield sshd\[30495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root 2020-06-19T11:14:36.616725shield sshd\[30495\]: Failed password for root from 183.82.121.34 port 50206 ssh2 2020-06-19T11:18:03.346943shield sshd\[31107\]: Invalid user asus from 183.82.121.34 port 47734 |
2020-06-19 19:20:48 |
| 154.92.15.7 | attackbotsspam | Fail2Ban Ban Triggered |
2020-06-19 19:09:37 |
| 144.160.235.143 | attack | SSH login attempts. |
2020-06-19 18:59:23 |
| 27.255.77.248 | attackspambots | smtp brute force login |
2020-06-19 19:10:07 |
| 40.101.12.98 | attack | SSH login attempts. |
2020-06-19 18:45:27 |
| 64.98.36.4 | attackspam | SSH login attempts. |
2020-06-19 18:58:22 |
| 218.92.0.199 | attack | Jun 19 12:33:49 idefix sshd[19292]: Failed password for root from 218.92.0.199 port 26087 ssh2 Jun 19 12:33:52 idefix sshd[19292]: Failed password for root from 218.92.0.199 port 26087 ssh2 |
2020-06-19 18:53:37 |
| 162.215.248.181 | attackbotsspam | SSH login attempts. |
2020-06-19 19:00:46 |
| 123.207.92.183 | attackspam | sshd: Failed password for invalid user .... from 123.207.92.183 port 44376 ssh2 (7 attempts) |
2020-06-19 18:51:37 |
| 14.161.45.187 | attackspambots | Jun 19 12:41:20 vps639187 sshd\[26885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Jun 19 12:41:21 vps639187 sshd\[26885\]: Failed password for root from 14.161.45.187 port 60281 ssh2 Jun 19 12:44:41 vps639187 sshd\[26937\]: Invalid user ustin from 14.161.45.187 port 60197 Jun 19 12:44:41 vps639187 sshd\[26937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ... |
2020-06-19 18:58:42 |
| 51.15.191.243 | attackbots | SSH login attempts. |
2020-06-19 19:08:24 |
| 14.18.62.124 | attackspam | srv02 SSH BruteForce Attacks 22 .. |
2020-06-19 19:16:07 |
| 64.233.165.109 | attackspambots | SSH login attempts. |
2020-06-19 18:46:22 |