JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.147.164

165.154.147.164 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 74%: ?

74%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.147.164

Whois 165.154.147.164

IP Abuse Reports for 165.154.147.164:

This IP address has been reported a total of 28 times from 20 distinct sources. 165.154.147.164 was first reported on April 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-18 03:08:19 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-17 09:20:54 (1 day ago)	Blocked by UFW (UDP on 8081) Source port: 39935 TTL: 37 Packet length: 74 54 TOS: 0x14 This report ... show more Blocked by UFW (UDP on 8081) Source port: 39935 TTL: 37 Packet length: 74 54 TOS: 0x14 This report (for 165.154.147.164) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-17 04:04:45 (2 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇦🇹 urnilxfgbez	2026-06-16 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 cwytech	2026-06-16 12:21:08 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.	Hacking
🇺🇸 cybsecaoccol	2026-06-14 02:28:13 (5 days ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇷🇸 Scan	2026-06-10 01:58:02 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇿 Countryman	2026-06-09 03:50:45 (1 week ago)	repeated unauthorized connection attempts, host sweep, port 22	Hacking Brute-Force
🇷🇸 Scan	2026-06-08 01:42:51 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 aza SilaS	2026-06-05 16:26:28 (1 week ago)	Jun 5 18:26:26 vmi1858823 sshd[1580492]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Jun 5 18:26:26 vmi1858823 sshd[1580492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.147.164 user=root Jun 5 18:26:27 vmi1858823 sshd[1580492]: Failed password for root from 165.154.147.164 port 53278 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-01 07:57:08 (2 weeks ago)	Force brute attack	DDoS Attack Port Scan Brute-Force
🇰🇷 Woodie	2026-06-01 01:04:29 (2 weeks ago)	2026-05-31T21:04:18.982058-04:00 debian sshd[2365873]: Failed password for root from 165.154.147.164 ... show more 2026-05-31T21:04:18.982058-04:00 debian sshd[2365873]: Failed password for root from 165.154.147.164 port 41060 ssh2 2026-05-31T21:04:21.558307-04:00 debian sshd[2365907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.147.164 user=root 2026-05-31T21:04:23.791908-04:00 debian sshd[2365907]: Failed password for root from 165.154.147.164 port 41070 ssh2 2026-05-31T21:04:26.664446-04:00 debian sshd[2365964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.147.164 user=root 2026-05-31T21:04:28.586920-04:00 debian sshd[2365964]: Failed password for root from 165.154.147.164 port 37536 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2026-05-30 18:18:57 (2 weeks ago)	SSH Brute force: 1243 attempts were recorded from 165.154.147.164 2026-05-30T18:48:44+02:00 Connecti ... show more SSH Brute force: 1243 attempts were recorded from 165.154.147.164 2026-05-30T18:48:44+02:00 Connection closed by authenticating user root 165.154.147.164 port 59754 [preauth] 2026-05-30T18:48:48+02:00 Connection closed by authenticating user root 165.154.147.164 port 47386 [preauth] 2026-05-30T18:48:52+02:00 Connection closed by authenticating user root 165.154.147.164 port 47396 [preauth] 2026-05-30T18:48:56+02:00 Connection closed by authenticating user root 165.154.147.164 port 55316 [preauth] 2026-05-30T18:49:00+02:00 Connection closed by authenticating user root 165.154.147.164 port 55328 [preauth] 2026-05-30T18:49:03+02:00 Connection closed by authenticating user root 165.154.147.164 port 55334 [preauth] 2026-05-30T18:49:07+02:00 Connection closed by authenticating user root 165.154.147.164 port 54782 [preauth] 2026-05-30T18:49:11+02:00 Connection closed by authenticating user root show less	Brute-Force SSH
🇨🇿 lp	2026-05-30 12:18:51 (2 weeks ago)	SSH Brute force: 1265 attempts were recorded from 165.154.147.164 2026-05-30T12:48:47+02:00 Connecti ... show more SSH Brute force: 1265 attempts were recorded from 165.154.147.164 2026-05-30T12:48:47+02:00 Connection closed by authenticating user root 165.154.147.164 port 47312 [preauth] 2026-05-30T12:48:51+02:00 Connection closed by authenticating user root 165.154.147.164 port 47328 [preauth] 2026-05-30T12:48:55+02:00 Connection closed by authenticating user root 165.154.147.164 port 47334 [preauth] 2026-05-30T12:48:59+02:00 Connection closed by authenticating user root 165.154.147.164 port 39558 [preauth] 2026-05-30T12:49:03+02:00 Connection closed by authenticating user root 165.154.147.164 port 39572 [preauth] 2026-05-30T12:49:07+02:00 Connection closed by authenticating user root 165.154.147.164 port 41826 [preauth] 2026-05-30T12:49:11+02:00 Connection closed by authenticating user root 165.154.147.164 port 41834 [preauth] 2026-05-30T12:49:15+02:00 Connection closed by authenticating user root show less	Brute-Force SSH
🇨🇿 lp	2026-05-30 06:18:51 (2 weeks ago)	SSH Brute force: 265 attempts were recorded from 165.154.147.164 2026-05-30T07:55:51+02:00 Connectio ... show more SSH Brute force: 265 attempts were recorded from 165.154.147.164 2026-05-30T07:55:51+02:00 Connection closed by authenticating user root 165.154.147.164 port 40670 [preauth] 2026-05-30T07:55:55+02:00 Connection closed by authenticating user root 165.154.147.164 port 40684 [preauth] 2026-05-30T07:55:59+02:00 Connection closed by authenticating user root 165.154.147.164 port 44318 [preauth] 2026-05-30T07:56:02+02:00 Connection closed by authenticating user root 165.154.147.164 port 44326 [preauth] 2026-05-30T07:56:06+02:00 Connection closed by authenticating user root 165.154.147.164 port 41670 [preauth] 2026-05-30T07:56:10+02:00 Connection closed by authenticating user root 165.154.147.164 port 41684 [preauth] 2026-05-30T07:56:14+02:00 Connection closed by authenticating user root 165.154.147.164 port 41698 [preauth] 2026-05-30T07:56:18+02:00 Connection closed by authenticating user root show less	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.38

🇳🇬 102.88.137.80

🇲🇽 189.133.250.23

🇧🇷 187.115.144.103

🇩🇪 165.232.71.112

🇺🇸 147.185.132.237

🇭🇰 103.229.126.95

🇮🇩 88.223.91.21

🇱🇧 62.84.78.51

🇰🇷 59.6.72.106

🇻🇳 1.52.97.80

🇨🇳 211.154.17.219

🇦🇷 157.92.145.135

🇨🇳 112.86.84.100

🇫🇷 85.217.140.31

🇩🇪 8.209.68.55

🇨🇳 223.153.91.168

🇲🇽 201.149.53.243

🇨🇴 181.56.210.115

🇮🇳 128.185.212.50