JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.112.168

165.154.112.168 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.112.168

Whois 165.154.112.168

IP Abuse Reports for 165.154.112.168:

This IP address has been reported a total of 17 times from 7 distinct sources. 165.154.112.168 was first reported on April 20th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-05-02 02:33:30 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 165.154.112.168 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 165.154.112.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 22:33:15.394410 2025] [security2:error] [pid 1426308:tid 1426308] [client 165.154.112.168:57642] [client 165.154.112.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_201802.html"] [unique_id "aBQu65NR6KQmdb68IJC8nAAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 scientificworld	2025-04-30 10:41:11 (1 year ago)	Apr 30 10:41:08 localhost sshd[13908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Apr 30 10:41:08 localhost sshd[13908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.112.168 user=root Apr 30 10:41:10 localhost sshd[13908]: Failed password for root from 165.154.112.168 port 58528 ssh2 ... show less	Brute-Force SSH
🇺🇸 COMPLEX	2025-04-29 00:50:15 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD I ... show more Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED) Protocol: HTTP/1.1 (GET method) Timestamp: 2025-04-29T00:47:20Z show less	Bad Web Bot
Anonymous	2025-04-28 06:52:04 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇺🇸 COMPLEX	2025-04-28 04:50:17 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD I ... show more Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-28T04:40:15Z show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-04-27 04:38:07 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 COMPLEX	2025-04-27 00:10:06 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD I ... show more Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-26T22:13:51Z show less	Bad Web Bot
🇺🇸 COMPLEX	2025-04-26 17:00:02 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD I ... show more Triggered Cloudflare WAF (l7ddos) from HK. Action taken: BLOCK ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-26T16:57:34Z show less	Bad Web Bot
🇮🇹 Samsteve169	2025-04-25 23:04:00 (1 year ago)	Received DDoS attack through Cloudflare	DDoS Attack
🇮🇹 Samsteve169	2025-04-25 19:04:00 (1 year ago)	Received DDoS attack through Cloudflare	DDoS Attack
🇮🇹 Samsteve169	2025-04-25 19:04:00 (1 year ago)	Received DDoS attack through Cloudflare	DDoS Attack
🇺🇸 basedchad	2025-04-25 05:37:17 (1 year ago)	This IP's subnet was blocked due to suspicious activity.	DDoS Attack Port Scan Brute-Force
🇺🇸 COMPLEX	2025-04-24 02:40:04 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE ASN: 135377 (UCLO ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE ASN: 135377 (UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-24T02:32:03Z show less	Bad Web Bot
Anonymous	2025-04-23 08:52:05 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
Anonymous	2025-04-22 07:52:05 (1 year ago)	Excessive connections to http/https ports	DDoS Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.34

🇬🇧 194.50.235.130

🇬🇧 193.163.125.189

🇺🇸 173.244.60.241

🇺🇸 162.216.150.129

🇭🇰 43.99.22.182

🇷🇴 2.57.121.25

🇰🇷 211.104.137.55

🇨🇳 120.239.28.157

🇨🇳 116.179.37.84

🇺🇸 107.167.34.125

🇨🇳 106.52.249.253

🇭🇷 82.23.211.77

🇺🇸 74.87.117.149

🇩🇪 69.5.169.210

🇺🇸 47.89.187.129

🇳🇱 45.156.87.204

🇳🇱 45.148.10.157

🇺🇸 44.201.138.198

🇺🇸 44.196.223.202