城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 199.165.159.0 - 199.165.159.255
CIDR: 199.165.159.0/24
NetName: SSF-NET-SF401
NetHandle: NET-199-165-159-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: The Shadowserver Foundation, Inc. (SF-1051)
RegDate: 2026-07-02
Updated: 2026-07-02
Comment: https://www.shadowserver.org
Ref: https://rdap.arin.net/registry/ip/199.165.159.0
OrgName: The Shadowserver Foundation, Inc.
OrgId: SF-1051
Address: 4695 Chabot Dr. Suite 200
City: Pleasanton
StateProv: CA
PostalCode: 94588
Country: US
RegDate: 2023-03-07
Updated: 2025-04-23
Ref: https://rdap.arin.net/registry/entity/SF-1051
OrgAbuseHandle: ABUSE9292-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-740-7420
OrgAbuseEmail: abuse@shadowserver.org
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE9292-ARIN
OrgTechHandle: NOC33598-ARIN
OrgTechName: NOC
OrgTechPhone: +1-408-740-7420
OrgTechEmail: noc@shadowserver.org
OrgTechRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
OrgNOCHandle: NOC33598-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-408-740-7420
OrgNOCEmail: noc@shadowserver.org
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC33598-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.165.159.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.165.159.185. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026110500 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 05 16:00:35 CST 2026
;; MSG SIZE rcvd: 108
185.159.165.199.in-addr.arpa domain name pointer scan-86-0.shadowserver.io.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
185.159.165.199.in-addr.arpa name = scan-86-0.shadowserver.io.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 36.41.174.139 | attackspambots | Invalid user grace from 36.41.174.139 port 33216 |
2019-10-29 06:12:59 |
| 104.244.72.221 | attackbots | [Aegis] @ 2019-10-28 22:22:19 0000 -> Maximum authentication attempts exceeded. |
2019-10-29 06:28:18 |
| 164.132.62.233 | attackspam | Invalid user saatatya from 164.132.62.233 port 53078 |
2019-10-29 06:00:43 |
| 37.139.13.105 | attackspambots | 2019-10-28T20:43:18.834619abusebot-3.cloudsearch.cf sshd\[25625\]: Invalid user zimbra from 37.139.13.105 port 47100 |
2019-10-29 06:12:13 |
| 106.13.53.173 | attackspambots | Oct 28 22:30:32 MainVPS sshd[23821]: Invalid user 12345 from 106.13.53.173 port 36266 Oct 28 22:30:32 MainVPS sshd[23821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.53.173 Oct 28 22:30:32 MainVPS sshd[23821]: Invalid user 12345 from 106.13.53.173 port 36266 Oct 28 22:30:34 MainVPS sshd[23821]: Failed password for invalid user 12345 from 106.13.53.173 port 36266 ssh2 Oct 28 22:35:08 MainVPS sshd[24145]: Invalid user ses from 106.13.53.173 port 46476 ... |
2019-10-29 06:05:55 |
| 162.247.74.206 | attackspambots | Invalid user 3comcso from 162.247.74.206 port 34518 |
2019-10-29 06:01:31 |
| 192.99.36.76 | attack | Invalid user qf from 192.99.36.76 port 46936 |
2019-10-29 06:16:45 |
| 111.161.41.156 | attackbots | 2019-10-28T22:03:02.462904abusebot-7.cloudsearch.cf sshd\[6548\]: Invalid user racoon from 111.161.41.156 port 39922 |
2019-10-29 06:27:27 |
| 59.25.197.162 | attackbotsspam | Oct 28 22:56:12 andromeda sshd\[41388\]: Invalid user nagios from 59.25.197.162 port 36314 Oct 28 22:56:12 andromeda sshd\[41388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.25.197.162 Oct 28 22:56:14 andromeda sshd\[41388\]: Failed password for invalid user nagios from 59.25.197.162 port 36314 ssh2 |
2019-10-29 06:10:56 |
| 185.220.101.73 | attackbotsspam | Invalid user a from 185.220.101.73 port 43565 |
2019-10-29 05:56:20 |
| 62.234.91.204 | attackbots | $f2bV_matches |
2019-10-29 06:09:30 |
| 54.36.108.162 | attackbots | Invalid user 1234 from 54.36.108.162 port 43281 |
2019-10-29 06:11:12 |
| 62.102.148.69 | attackspambots | Invalid user a from 62.102.148.69 port 42565 |
2019-10-29 06:10:28 |
| 155.4.71.18 | attackbots | Invalid user user from 155.4.71.18 port 40370 |
2019-10-29 06:02:28 |
| 106.12.134.58 | attackspam | Invalid user james from 106.12.134.58 port 52820 |
2019-10-29 06:06:12 |