JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.122

165.154.163.122 was found in our database!

This IP was reported 1,518 times. Confidence of Abuse is 65%: ?

65%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.122

Whois 165.154.163.122

IP Abuse Reports for 165.154.163.122:

This IP address has been reported a total of 1,518 times from 120 distinct sources. 165.154.163.122 was first reported on January 31st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sandra361	2026-06-21 08:59:01 (3 days ago)	Port scan detected: 19 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.15 ... show more Port scan detected: 19 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154.163.122 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=5272 DF PROTO=TCP SPT=43962 DPT=8181 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 diego	2026-06-19 06:00:20 (5 days ago)	[probe-44-49] 2026-06-19 05:43:13, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-19 05:43:13, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-19 05:29:14 (5 days ago)	[arem1] 2026-06-19 05:11:47, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GE ... show more [arem1] 2026-06-19 05:11:47, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 Axel	2026-06-18 08:31:37 (6 days ago)	[2026-06-18 08:31:37 UTC] Honeypot SSDP connection attempt \| AXFRA HONEYPOT	DDoS Attack
Anonymous	2026-06-14 07:32:14 (1 week ago)		DNS Compromise DDoS Attack
🇺🇸 zapteryx	2026-06-13 22:43:59 (1 week ago)	165.154.163.122 - - [13/Jun/2026:18:43:58 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x02x{ ... show more 165.154.163.122 - - [13/Jun/2026:18:43:58 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x02x{\xC7=\x8C\xF2\xF7\xF0\x5C\xA4\xFCTX\xF9\x7F\xA4\x05k]\x22C\x1A\xB2\x92\xF4tN\xE37\xCB\xFC \xCE\xBD\x9Bu\x89H\x1Az\xAFt\xF2\xF9,\xE7\xD3\x1E>n \xA0;\x1C=e\xE1\xD8Q@\x10\xF9c8\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 166 "-" "-" 165.154.163.122 - - [13/Jun/2026:18:43:58 -0400] "\x16\x03\x01\x00\xDF\x01\x00\x00\xDB\x03\x03\x83\xE7\xF5\xAA?\xE9\xA8`\x81\xA9,\x5C \xDE\x07\xA8\x03\x95\x09\xD4xh\xC1Z\x0F\xF8\x0B\xCE\xCD\xD2@\x99\x00\x00h\x00\xA2\x00\x15\x00\x08\x00\x14\x00\xA3\x00j\xC0\x11\xC0\x12\xC0(\x003\xC0/\x00g\x00\x11\x009\x00\x9C\xC0'\xC00\x00\x03\x00\x19\x00\x04\x00\x16\x00k\x00\x9D\xCC\xA9\x00\x06\xCC\xAA\x005\x00\x05\x00\x13\x00/\x00@\xC0\x08\x00\x12\xC0\x13\xCC\xA8\xC0" 400 166 "-" "-" 165.154.163.122 - - [13/Jun/2026:18:43:58 -0400] "\x16\x03\x01\x00\xD3\x01\x00\x00\xCF\x03\x03\xC2\x7F\xC2\xC4`*\xE7!\x8D\xD0\xAEE\x22T^i\xE1\xE9\xE53:\x90k\xE2\xE0\xBAz\xA7f\ ... show less	Brute-Force Web App Attack
🇧🇷 opastorello	2026-06-13 01:02:47 (1 week ago)	T-Pot honeypot: 119 hits in 15min on port(s) 8080 (P0f/Suricata). Web app attack/scan. Automated rep ... show more T-Pot honeypot: 119 hits in 15min on port(s) 8080 (P0f/Suricata). Web app attack/scan. Automated report. show less	Port Scan Web App Attack
🇧🇷 diego	2026-06-12 14:15:20 (1 week ago)	[probe-44-49] 2026-06-12 13:59:05, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-12 13:59:05, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-11 04:03:07 (1 week ago)	[arem1] 2026-06-11 03:44:53, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GE ... show more [arem1] 2026-06-11 03:44:53, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-11 02:30:20 (1 week ago)	[probe-44-49] 2026-06-11 01:51:51, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-06-11 01:51:51, Client: 165.154.163.122, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇭🇰 sandra361	2026-06-10 23:49:22 (2 weeks ago)	Port scan detected: 22 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.15 ... show more Port scan detected: 22 attempts across 1 ports (8181). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.163.122 LEN=60 TOS=0x14 PREC=0x00 TTL=47 ID=53804 DF PROTO=TCP SPT=33674 DPT=8181 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-06-04 08:04:38 (2 weeks ago)	Connection to port 172 with data transfer. Data preview: �	Port Scan Hacking
🇨🇦 unullable	2026-05-25 17:03:49 (4 weeks ago)	CPoT triggered at tcp/8181.GO-HTTP-CLIENT/1.1	Hacking
🇮🇳 evicky2002	2026-05-22 13:19:47 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇩 Burayot	2026-05-22 10:26:45 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 165.154.163.122 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 165.154.163.122 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 1518 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.153.86.250

🇳🇱 195.178.110.227

🇱🇹 188.69.225.188

🇺🇸 172.110.223.135

🇰🇷 152.32.139.9

🇯🇵 118.194.236.142

🇨🇳 112.65.212.118

🇺🇸 64.62.197.231

🇬🇧 35.203.210.44

🇧🇪 34.78.232.242

🇫🇷 212.73.217.80

🇫🇷 185.210.205.153

🇨🇦 184.151.88.27

🇺🇸 147.185.132.118

🇨🇳 140.206.235.24

🇨🇳 117.191.127.86

🇦🇺 115.129.72.244

🇵🇭 112.208.180.61

🇮🇹 93.92.78.92

🇭🇷 89.164.135.5