JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.134.22

165.154.134.22 was found in our database!

This IP was reported 1,541 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.134.22

Whois 165.154.134.22

IP Abuse Reports for 165.154.134.22:

This IP address has been reported a total of 1,541 times from 128 distinct sources. 165.154.134.22 was first reported on January 31st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-06-03 00:26:38 (3 days ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15 Accept-Encoding: gzip; 8181 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇲🇹 neilcaruana	2026-06-02 14:55:07 (4 days ago)	Sentinel detected an attack on port [8181]	Hacking
🇯🇵 mkaraki	2026-06-02 10:29:07 (4 days ago)	1780396146 # Service_probe # SIGNATURE_SEND # source_ip:165.154.134.22 # dst_port:165 ...	Port Scan
🇺🇸 drewf.ink	2026-05-29 10:42:12 (1 week ago)	[10:42] Port scanning. Port(s) scanned: TCP/137	Port Scan
🇺🇸 drewf.ink	2026-05-22 19:13:04 (2 weeks ago)	[19:13] Port scanning. Port(s) scanned: TCP/82	Port Scan
🇮🇳 evicky2002	2026-05-22 13:19:47 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇵🇱 sefinek.net	2026-05-22 11:51:37 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0 Accept-Encoding: gzip; 8181 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇷 vincent_EUDIER	2026-05-22 08:40:00 (2 weeks ago)	SURICATA HTTP unable to match response to request	Hacking
🇫🇷 SimonB	2026-05-20 17:26:07 (2 weeks ago)	SSH bruteforce attempt	Brute-Force SSH
🇳🇱 JCB	2026-05-19 14:03:00 (2 weeks ago)	imap-login	Brute-Force
🇺🇸 donarev419	2026-05-17 08:58:49 (2 weeks ago)	Connection to port 57 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 donarev419	2026-05-17 08:27:39 (2 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8181 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: show less	Port Scan Hacking
🇨🇳 ThreatBook.io	2026-05-16 23:32:21 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/165.154.134.22	SSH
🇳🇱 BIV	2026-05-16 20:11:25 (2 weeks ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 8181. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 8181. Automated tiered submission (T-Pot + DShield). show less	Port Scan Hacking
🇩🇪 dispaisyenterprises	2026-05-16 17:35:37 (3 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_ ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.17 Accept-Encoding: gzip; 8181 [6] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 1541 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 210.68.105.68

🇬🇧 198.244.240.186

🇨🇦 198.50.197.28

🇺🇸 173.17.162.9

🇺🇸 172.253.242.113

🇺🇸 151.240.93.218

🇨🇳 116.178.128.146

🇫🇷 88.142.46.185

🇬🇧 81.19.219.194

🇬🇧 51.195.215.239

🇮🇹 2.57.170.146

🇸🇬 2001:19f0:4400:526e:5400:6ff:fe0b:86b8

🇨🇳 223.109.200.181

🇧🇪 198.235.24.233

🇲🇽 189.178.115.107

🇻🇳 180.93.43.99

🇺🇸 151.240.93.123

🇫🇮 147.185.133.177

🇮🇳 139.59.83.32

🇩🇪 130.12.181.98