JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.162.217

165.154.162.217 was found in our database!

This IP was reported 1,445 times. Confidence of Abuse is 92%: ?

92%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.162.217

Whois 165.154.162.217

IP Abuse Reports for 165.154.162.217:

This IP address has been reported a total of 1,445 times from 119 distinct sources. 165.154.162.217 was first reported on January 31st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gbzret4d	2026-06-02 12:21:55 (5 days ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Inte ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15 Accept-Encoding: gzip; 8181 [14] TCP show less	Hacking Bad Web Bot
🇩🇪 ghostwarriors	2026-05-20 17:20:08 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 ipcop.net	2026-05-20 07:35:04 (2 weeks ago)	2026-05-20T09:34:05.753595+02:00 gw-de12-01.guestgw.net sshd[794811]: error: kex_exchange_identifica ... show more 2026-05-20T09:34:05.753595+02:00 gw-de12-01.guestgw.net sshd[794811]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" 2026-05-20T09:34:05.759189+02:00 gw-de12-01.guestgw.net sshd[794811]: banner exchange: Connection from 165.154.162.217 port 49640: invalid format 2026-05-20T09:34:07.115813+02:00 gw-de12-01.guestgw.net sshd[794818]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" 2026-05-20T09:34:07.116351+02:00 gw-de12-01.guestgw.net sshd[794818]: banner exchange: Connection from 165.154.162.217 port 37976: invalid format 2026-05-20T09:35:02.953756+02:00 gw-de12-01.guestgw.net sshd[795069]: banner exchange: Connection from 165.154.162.217 port 33346: invalid format show less	Brute-Force
🇮🇳 evicky2002	2026-05-20 06:29:07 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 donarev419	2026-05-18 02:39:59 (2 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:8181 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ show less	Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-17 21:34:30 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13) ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13) AppleWebKit/619.4 (KHTML, like Gecko) Version/16.1.13 Safari/619.4 Accept-Encoding: gzip; 8181 [6] TCP show less	Web App Attack
🇯🇵 mkaraki	2026-05-17 17:38:33 (3 weeks ago)	1779039512 # Service_probe # SIGNATURE_SEND # source_ip:165.154.162.217 # dst_port:8181 ...	Port Scan
🇩🇪 femboy.cat	2026-05-16 23:09:00 (3 weeks ago)	Port scan to tcp/8181 from 165.154.162.217	Brute-Force
🇦🇺 LiftUp Hosting	2026-05-15 21:39:58 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 Accept-Encoding: gzip; 8181 [6] TCP show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-15 21:39:52 (3 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_ ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.17 Accept-Encoding: gzip; 8181 [6] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 specializedtom	2026-05-15 17:29:21 (3 weeks ago)	Fail2Ban triggered a ban on 165.154.162.217 for postfix-sasl	Phishing Email Spam Spoofing
🇺🇦 Luk	2026-05-15 17:22:04 (3 weeks ago)	May 15 20:20:16 khomus sshd-session[3881]: banner exchange: Connection from 165.154.162.217 port 344 ... show more May 15 20:20:16 khomus sshd-session[3881]: banner exchange: Connection from 165.154.162.217 port 34428: invalid format May 15 20:20:18 khomus sshd-session[3882]: banner exchange: Connection from 165.154.162.217 port 51102: invalid format May 15 20:20:18 khomus sshd-session[3883]: banner exchange: Connection from 165.154.162.217 port 51114: invalid format May 15 20:20:20 khomus sshd-session[3884]: banner exchange: Connection from 165.154.162.217 port 51130: invalid format May 15 20:22:04 khomus sshd-session[3893]: banner exchange: Connection from 165.154.162.217 port 59526: invalid format ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-05-15 14:51:00 (3 weeks ago)	ICS Labs identified 165.154.162.217 as a malicious indicator from threat intelligence.	Hacking
🇬🇧 gbzret4d	2026-05-15 11:03:39 (3 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_ ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/4.0 Accept-Encoding: gzip; 8181 [6] TCP show less	Hacking Bad Web Bot
Anonymous	2026-05-11 09:52:04 (3 weeks ago)	Reported from Nginx log analysis 6. Log: 165.154.162.217 - - [11/May/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 6. Log: 165.154.162.217 - - [11/May/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Safari/537.36" "-" "US United States Los Angeles" "AS135377" "UCLOUD INFORMATION TECHNOLOGY HK LIMITED" show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 1445 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 129.121.54.208

🇦🇪 20.203.42.204

🇨🇱 181.173.237.8

🇺🇸 165.22.9.166

🇺🇸 124.198.132.189

🇻🇳 103.48.192.48

🇱🇹 45.227.254.170

🇷🇺 45.135.166.192

🇹🇿 41.59.53.182

🇪🇬 197.39.45.20

🇺🇸 196.51.184.171

🇺🇾 167.62.221.54

🇻🇳 160.250.186.97

🇩🇪 155.117.127.5

🇹🇷 88.225.215.108

🇳🇱 45.148.10.157

🇺🇸 3.219.81.66

🇷🇺 176.109.97.11

🇭🇰 154.81.14.172

🇨🇳 101.68.14.192