JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.135.211

165.154.135.211 was found in our database!

This IP was reported 1,519 times. Confidence of Abuse is 76%: ?

76%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.135.211

Whois 165.154.135.211

IP Abuse Reports for 165.154.135.211:

This IP address has been reported a total of 1,519 times from 130 distinct sources. 165.154.135.211 was first reported on January 31st 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-06-20 05:20:20 (4 days ago)	[probe-44-49] 2026-06-20 05:04:23, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-20 05:04:23, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇮🇩 Burayot	2026-06-20 05:04:09 (4 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 165.154.135.211 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 165.154.135.211 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇸🇰 KlinikaMD	2026-06-20 00:00:43 (4 days ago)	Automatic report from KMD firewall log.	Port Scan Hacking Brute-Force
🇧🇷 opastorello	2026-06-18 13:56:50 (5 days ago)	T-Pot honeypot: 42 hits in 15min on port(s) 49152 (P0f/Honeytrap). Port scan / unsolicited connectio ... show more T-Pot honeypot: 42 hits in 15min on port(s) 49152 (P0f/Honeytrap). Port scan / unsolicited connection. Automated report. show less	Port Scan
🇺🇸 Starburst SysOp Team	2026-06-14 21:50:29 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)	Hacking Bad Web Bot
🇳🇱 BIV	2026-06-13 17:40:03 (1 week ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇵🇱 Wepted	2026-06-12 15:57:23 (1 week ago)	Port scan detected by honeypot	Port Scan Hacking
🇧🇷 diego	2026-06-12 03:05:20 (1 week ago)	[probe-44-49] 2026-06-12 02:45:42, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-12 02:45:42, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-12 01:55:20 (1 week ago)	[probe-44-49] 2026-06-12 01:38:41, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-12 01:38:41, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇪🇸 liewebs	2026-06-11 04:36:40 (1 week ago)	SYN Flood attack detected - cloud03.liewebs.es	Port Scan DDoS Attack
🇧🇷 diego	2026-06-11 02:25:20 (1 week ago)	[probe-44-49] 2026-06-11 02:08:18, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-11 02:08:18, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-11 02:05:19 (1 week ago)	[probe-168-134] 2026-06-11 01:48:18, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to ... show more [probe-168-134] 2026-06-11 01:48:18, Client: 165.154.135.211, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇭🇰 sandra361	2026-06-10 23:51:22 (1 week ago)	Port scan detected: 11 attempts across 1 ports (8181). \| Evidence: GHOST_SCAN: IN=eth0 SRC=165.154.1 ... show more Port scan detected: 11 attempts across 1 ports (8181). \| Evidence: GHOST_SCAN: IN=eth0 SRC=165.154.135.211 LEN=60 TOS=0x14 PREC=0x00 TTL=47 ID=2404 DF PROTO=TCP SPT=44554 DPT=8181 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-10 16:26:09 (1 week ago)	165.154.135.211 - visio.sliver85.eu - [10/Jun/2026:18:26:02 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 ... show more 165.154.135.211 - visio.sliver85.eu - [10/Jun/2026:18:26:02 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" 165.154.135.211 - visio.sliver85.eu - [10/Jun/2026:18:26:05 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/18.17763" 165.154.135.211 - visio.sliver85.eu - [10/Jun/2026:18:26:08 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 sandra361	2026-06-09 22:28:42 (2 weeks ago)	Port scan detected: 18 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC= ... show more Port scan detected: 18 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=165.154.135.211 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=55503 DF PROTO=TCP SPT=54218 DPT=8181 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan

Showing 1 to 15 of 1519 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.232.233

🇻🇳 171.244.37.97

🇫🇷 91.231.89.71

🇺🇸 2606:4700:10f::a29f:c440

🇵🇱 194.180.49.220

🇨🇳 180.97.50.209

🇧🇷 170.82.55.35

🇱🇹 141.98.9.130

🇺🇸 135.119.73.164

🇭🇰 123.58.215.102

🇨🇦 85.217.149.1

🇺🇸 64.225.17.153

🇺🇸 23.100.85.64

🇬🇧 193.163.125.212

🇮🇳 185.100.212.141

🇮🇹 151.95.211.132

🇮🇩 103.154.231.122

🇮🇳 103.118.35.22

🇬🇪 80.241.253.211

🇧🇬 79.124.62.134