城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 199.165.159.0 - 199.165.159.255
CIDR: 199.165.159.0/24
NetName: SSF-NET-SF401
NetHandle: NET-199-165-159-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: The Shadowserver Foundation, Inc. (SF-1051)
RegDate: 2026-07-02
Updated: 2026-07-02
Comment: https://www.shadowserver.org
Ref: https://rdap.arin.net/registry/ip/199.165.159.0
OrgName: The Shadowserver Foundation, Inc.
OrgId: SF-1051
Address: 4695 Chabot Dr. Suite 200
City: Pleasanton
StateProv: CA
PostalCode: 94588
Country: US
RegDate: 2023-03-07
Updated: 2025-04-23
Ref: https://rdap.arin.net/registry/entity/SF-1051
OrgAbuseHandle: ABUSE9292-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-740-7420
OrgAbuseEmail: abuse@shadowserver.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN
OrgTechHandle: NOC33598-ARIN
OrgTechName: NOC
OrgTechPhone: +1-408-740-7420
OrgTechEmail: noc@shadowserver.org
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
OrgNOCHandle: NOC33598-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-408-740-7420
OrgNOCEmail: noc@shadowserver.org
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.165.159.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.165.159.174. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102501 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 26 13:31:27 CST 2026
;; MSG SIZE rcvd: 108
174.159.165.199.in-addr.arpa domain name pointer scan-84-5.shadowserver.io.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
174.159.165.199.in-addr.arpa name = scan-84-5.shadowserver.io.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 180.163.220.43 | attackbots | Web bot without proper user agent declaration scraping website pages |
2019-12-26 20:51:37 |
| 61.178.249.25 | attackbots | Unauthorized connection attempt detected from IP address 61.178.249.25 to port 445 |
2019-12-26 20:28:38 |
| 106.12.78.161 | attackspambots | Unauthorized connection attempt detected from IP address 106.12.78.161 to port 22 |
2019-12-26 20:52:10 |
| 202.177.243.248 | attack | Automatic report - Port Scan Attack |
2019-12-26 21:04:54 |
| 94.25.224.215 | attackbots | Unauthorized connection attempt detected from IP address 94.25.224.215 to port 445 |
2019-12-26 20:34:14 |
| 103.237.117.227 | attackbots | Unauthorized connection attempt detected from IP address 103.237.117.227 to port 445 |
2019-12-26 20:58:58 |
| 223.206.241.217 | attackspam | 1577341278 - 12/26/2019 07:21:18 Host: 223.206.241.217/223.206.241.217 Port: 445 TCP Blocked |
2019-12-26 20:41:56 |
| 222.186.180.9 | attackspam | k+ssh-bruteforce |
2019-12-26 20:53:29 |
| 106.13.102.73 | attackbots | Dec 26 09:23:05 MK-Soft-Root1 sshd[20600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.102.73 Dec 26 09:23:07 MK-Soft-Root1 sshd[20600]: Failed password for invalid user vasanth from 106.13.102.73 port 55266 ssh2 ... |
2019-12-26 20:31:19 |
| 185.176.27.254 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 3000 proto: TCP cat: Misc Attack |
2019-12-26 20:30:57 |
| 189.206.175.204 | attackbotsspam | Unauthorized connection attempt detected from IP address 189.206.175.204 to port 445 |
2019-12-26 20:30:20 |
| 188.165.228.86 | attackbots | Wordpress attack |
2019-12-26 20:46:12 |
| 176.113.70.50 | attack | 176.113.70.50 was recorded 9 times by 4 hosts attempting to connect to the following ports: 1900. Incident counter (4h, 24h, all-time): 9, 53, 982 |
2019-12-26 20:56:49 |
| 112.84.90.246 | attackbotsspam | Dec 26 07:21:38 grey postfix/smtpd\[16054\]: NOQUEUE: reject: RCPT from unknown\[112.84.90.246\]: 554 5.7.1 Service unavailable\; Client host \[112.84.90.246\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[112.84.90.246\]\; from=\ |
2019-12-26 20:26:09 |
| 62.73.127.10 | attack | Autoban 62.73.127.10 AUTH/CONNECT |
2019-12-26 20:56:16 |