JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.162.3

165.154.162.3 was found in our database!

This IP was reported 1,483 times. Confidence of Abuse is 81%: ?

81%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.162.3

Whois 165.154.162.3

IP Abuse Reports for 165.154.162.3:

This IP address has been reported a total of 1,483 times from 107 distinct sources. 165.154.162.3 was first reported on January 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-20 06:29:07 (2 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇸🇬 drewf.ink	2026-05-18 10:01:19 (2 weeks ago)	[10:01] Port scanning. Port(s) scanned: TCP/77	Port Scan
🇺🇸 donarev419	2026-05-18 04:44:34 (2 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:8181 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ show less	Port Scan Hacking
🇳🇱 donarev419	2026-05-18 02:31:35 (2 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) A show less	Port Scan Hacking
🇦🇺 trentwiles.com	2026-05-17 12:30:33 (2 weeks ago)	Unauthorized connection attempt detected from IP address 165.154.162.3 to port 8181 [SYD]	Port Scan
🇺🇸 donarev419	2026-05-17 01:54:32 (2 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 104.250.239.52:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 104.250.239.52:8181 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) show less	Port Scan Hacking
🇸🇬 drewf.ink	2026-05-16 10:18:28 (2 weeks ago)	[10:18] Port scanning. Port(s) scanned: TCP/37	Port Scan
🇦🇺 LiftUp Hosting	2026-05-16 04:04:00 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Fedora; Linux i686) AppleWebK ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip; 8181 [10] TCP show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-16 04:03:43 (2 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_ ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.14 Accept-Encoding: gzip; 8181 [10] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 donarev419	2026-05-16 01:32:32 (2 weeks ago)	Connection to port 29 with data transfer. Data preview: �	Port Scan Hacking
🇩🇪 ghostwarriors	2026-05-15 21:20:31 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇦🇺 LiftUp Hosting	2026-05-15 10:16:01 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Accept-Encoding: gzip; 8181 [6] TCP show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-15 10:15:52 (2 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_ ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 Accept-Encoding: gzip; 8181 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 ICS Labs	2026-05-14 13:15:24 (3 weeks ago)	ICS Labs identified 165.154.162.3 as a malicious indicator from threat intelligence.	Hacking
🇨🇳 ThreatBook.io	2026-05-13 22:32:12 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/165.154.162.3	SSH

Showing 1 to 15 of 1483 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.216

🇩🇪 194.88.98.87

🇷🇺 109.195.179.94

🇮🇳 103.194.243.199

🇳🇱 83.83.19.205

🇧🇬 78.128.113.22

🇬🇧 45.82.76.110

🇲🇳 203.23.199.88

🇬🇧 198.178.235.41

🇺🇸 198.46.134.148

🇬🇧 193.163.125.44

🇳🇱 93.123.109.126

🇺🇸 24.199.111.75

🇺🇸 24.23.125.83

🇺🇸 23.27.244.95

🇨🇳 220.178.246.43

🇲🇽 186.96.145.241

🇸🇪 171.25.158.24

🇭🇰 150.5.132.236

🇹🇷 149.34.210.139