城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 199.165.159.0 - 199.165.159.255
CIDR: 199.165.159.0/24
NetName: SSF-NET-SF401
NetHandle: NET-199-165-159-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: The Shadowserver Foundation, Inc. (SF-1051)
RegDate: 2026-07-02
Updated: 2026-07-02
Comment: https://www.shadowserver.org
Ref: https://rdap.arin.net/registry/ip/199.165.159.0
OrgName: The Shadowserver Foundation, Inc.
OrgId: SF-1051
Address: 4695 Chabot Dr. Suite 200
City: Pleasanton
StateProv: CA
PostalCode: 94588
Country: US
RegDate: 2023-03-07
Updated: 2025-04-23
Ref: https://rdap.arin.net/registry/entity/SF-1051
OrgAbuseHandle: ABUSE9292-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-740-7420
OrgAbuseEmail: abuse@shadowserver.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN
OrgTechHandle: NOC33598-ARIN
OrgTechName: NOC
OrgTechPhone: +1-408-740-7420
OrgTechEmail: noc@shadowserver.org
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
OrgNOCHandle: NOC33598-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-408-740-7420
OrgNOCEmail: noc@shadowserver.org
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.165.159.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56050
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.165.159.164. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102400 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 24 19:03:18 CST 2026
;; MSG SIZE rcvd: 108164.159.165.199.in-addr.arpa domain name pointer scan-83-3.shadowserver.io.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
164.159.165.199.in-addr.arpa name = scan-83-3.shadowserver.io.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.52.9.242 | attackbots | Sep 30 06:20:04 meumeu sshd[12556]: Failed password for root from 37.52.9.242 port 50928 ssh2 Sep 30 06:24:07 meumeu sshd[13133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.52.9.242 Sep 30 06:24:09 meumeu sshd[13133]: Failed password for invalid user ubuntu from 37.52.9.242 port 37748 ssh2 ... |
2019-09-30 12:39:52 |
| 156.217.232.28 | attackspam | Chat Spam |
2019-09-30 12:29:36 |
| 222.186.169.192 | attack | Sep 30 00:22:35 debian sshd\[11813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Sep 30 00:22:36 debian sshd\[11813\]: Failed password for root from 222.186.169.192 port 55412 ssh2 Sep 30 00:22:40 debian sshd\[11813\]: Failed password for root from 222.186.169.192 port 55412 ssh2 ... |
2019-09-30 12:42:39 |
| 185.175.93.101 | attackspambots | 09/30/2019-06:06:37.555578 185.175.93.101 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-30 12:26:43 |
| 222.186.31.145 | attackbots | Sep 30 05:53:03 rotator sshd\[26767\]: Failed password for root from 222.186.31.145 port 25255 ssh2Sep 30 05:53:05 rotator sshd\[26767\]: Failed password for root from 222.186.31.145 port 25255 ssh2Sep 30 05:53:07 rotator sshd\[26767\]: Failed password for root from 222.186.31.145 port 25255 ssh2Sep 30 05:59:07 rotator sshd\[27678\]: Failed password for root from 222.186.31.145 port 45269 ssh2Sep 30 05:59:10 rotator sshd\[27678\]: Failed password for root from 222.186.31.145 port 45269 ssh2Sep 30 05:59:12 rotator sshd\[27678\]: Failed password for root from 222.186.31.145 port 45269 ssh2 ... |
2019-09-30 12:05:58 |
| 49.88.112.78 | attackbotsspam | Sep 30 09:37:52 areeb-Workstation sshd[23563]: Failed password for root from 49.88.112.78 port 26354 ssh2 ... |
2019-09-30 12:17:10 |
| 111.85.191.131 | attackbots | Sep 30 07:16:03 server sshd\[12622\]: Invalid user admin from 111.85.191.131 port 34532 Sep 30 07:16:03 server sshd\[12622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.85.191.131 Sep 30 07:16:04 server sshd\[12622\]: Failed password for invalid user admin from 111.85.191.131 port 34532 ssh2 Sep 30 07:19:48 server sshd\[10424\]: User root from 111.85.191.131 not allowed because listed in DenyUsers Sep 30 07:19:48 server sshd\[10424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.85.191.131 user=root |
2019-09-30 12:39:06 |
| 43.247.156.168 | attackbots | Sep 29 17:53:16 eddieflores sshd\[19057\]: Invalid user qi from 43.247.156.168 Sep 29 17:53:16 eddieflores sshd\[19057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.156.168 Sep 29 17:53:18 eddieflores sshd\[19057\]: Failed password for invalid user qi from 43.247.156.168 port 35928 ssh2 Sep 29 17:58:42 eddieflores sshd\[19490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.156.168 user=root Sep 29 17:58:44 eddieflores sshd\[19490\]: Failed password for root from 43.247.156.168 port 56092 ssh2 |
2019-09-30 12:33:15 |
| 171.253.99.106 | attack | 23/tcp 23/tcp 23/tcp... [2019-09-28/29]4pkt,1pt.(tcp) |
2019-09-30 12:14:49 |
| 92.118.160.17 | attackbotsspam | Honeypot attack, port: 135, PTR: 92.118.160.17.netsystemsresearch.com. |
2019-09-30 12:23:04 |
| 80.211.0.160 | attackspam | Sep 30 06:41:51 vps647732 sshd[30114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.0.160 Sep 30 06:41:53 vps647732 sshd[30114]: Failed password for invalid user server from 80.211.0.160 port 37514 ssh2 ... |
2019-09-30 12:43:51 |
| 220.142.125.147 | attackbots | 2323/tcp 23/tcp 2323/tcp [2019-09-28/30]3pkt |
2019-09-30 12:20:17 |
| 112.255.4.164 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.255.4.164/ CN - 1H : (636) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 112.255.4.164 CIDR : 112.224.0.0/11 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 WYKRYTE ATAKI Z ASN4837 : 1H - 3 3H - 13 6H - 28 12H - 47 24H - 86 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-30 12:12:37 |
| 200.29.32.143 | attackspam | Sep 30 05:54:10 v22019058497090703 sshd[25828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.32.143 Sep 30 05:54:12 v22019058497090703 sshd[25828]: Failed password for invalid user ben from 200.29.32.143 port 48572 ssh2 Sep 30 05:58:28 v22019058497090703 sshd[26203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.32.143 ... |
2019-09-30 12:38:53 |
| 222.186.15.110 | attackspam | Sep 29 17:52:34 hpm sshd\[31291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Sep 29 17:52:36 hpm sshd\[31291\]: Failed password for root from 222.186.15.110 port 27862 ssh2 Sep 29 17:52:39 hpm sshd\[31291\]: Failed password for root from 222.186.15.110 port 27862 ssh2 Sep 29 17:52:41 hpm sshd\[31291\]: Failed password for root from 222.186.15.110 port 27862 ssh2 Sep 29 18:01:54 hpm sshd\[32128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root |
2019-09-30 12:06:32 |