199.165.159.23

🇺🇸Pleasanton, California, United States · AS22168 The Shadowserver Foundation, Inc.

79%

Abuse confidence: High

Reported 53 times by 7 reporters, most recently 3 hours ago.

What it was reported for

Reports

When	Reporter	Categories	Comment
4 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
4 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
4 days ago	Automated feed	SSH
4 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
4 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
5 days ago	Automated feed	Web App Attack Command & Control HTTP Flood	Listed by www.nubi-network.com
5 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
5 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
5 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
5 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
5 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
6 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
6 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
6 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
6 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
6 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
7 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
7 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
7 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
7 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
7 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
8 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
8 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
8 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
9 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io

Details

Version: IPv4
Tor exit: no
Hostname: scan-92-6.shadowserver.io
ASN: AS22168
Network: The Shadowserver Foundation, Inc.
Country: 🇺🇸 United States
Region: California
City: Pleasanton (approx.)
First seen: 25 Oct 2026
Last seen: 6 Nov 2026

Location and network: IP Geolocation by DB-IP

Reported nearby

Other addresses in the same /24 reported in the last 90 days.

Same lookup from a script

curl -s "https://isipsafe.com/api/v1/check?ip=199.165.159.23"

Check the surrounding /24 · API docs