JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.149

165.154.163.149 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.149

Whois 165.154.163.149

IP Abuse Reports for 165.154.163.149:

This IP address has been reported a total of 94 times from 46 distinct sources. 165.154.163.149 was first reported on April 28th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sandra361	2026-07-15 16:30:02 (14 hours ago)	Port scan detected: 7 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154. ... show more Port scan detected: 7 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154.163.149 LEN=239 TOS=0x00 PREC=0x00 TTL=58 ID=28259 DF PROTO=TCP SPT=55394 DPT=4433 WINDOW=64952 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-15 05:54:27 (1 day ago)	Honeypot hit: HTTP/1.1 request on 1189 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ... show more Honeypot hit: HTTP/1.1 request on 1189 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0 Accept-Encoding: gzip; 1189 [6] TCP show less	Web App Attack
🇧🇷 diego	2026-07-14 16:07:26 (1 day ago)	[arem1] 2026-07-14 15:48:12, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GE ... show more [arem1] 2026-07-14 15:48:12, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-14 15:43:48 (1 day ago)	[probe-44-49] 2026-07-14 15:24:32, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-14 15:24:32, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-14 11:56:52 (1 day ago)	Honeypot hit: HTTP/1.1 request on 1057 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 1057 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15 Accept-Encoding: gzip; 1057 [6] TCP show less	Web App Attack
🇧🇷 diego	2026-07-14 11:53:48 (1 day ago)	[probe-44-49] 2026-07-14 11:37:29, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-14 11:37:29, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇷🇺 6o6ep	2026-07-13 23:11:20 (2 days ago)	GeoIP rejected	Email Spam Port Scan
🇧🇷 diego	2026-07-13 15:27:26 (2 days ago)	[arem1] 2026-07-13 15:09:16, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GE ... show more [arem1] 2026-07-13 15:09:16, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-13 14:33:48 (2 days ago)	[probe-44-49] 2026-07-13 13:51:43, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-13 13:51:43, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-13 13:08:48 (2 days ago)	[probe-44-49] 2026-07-13 12:34:53, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-13 12:34:53, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 donarev419	2026-07-13 05:54:06 (3 days ago)	Connection to port 904 with data transfer. Data preview: �	Port Scan Hacking
🇧🇷 diego	2026-07-12 13:13:48 (3 days ago)	[probe-44-49] 2026-07-12 12:57:07, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-12 12:57:07, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-12 11:08:48 (3 days ago)	[probe-44-49] 2026-07-12 10:49:56, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-12 10:49:56, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-12 09:58:48 (3 days ago)	[probe-44-49] 2026-07-12 09:42:29, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HT ... show more [probe-44-49] 2026-07-12 09:42:29, Client: 165.154.163.149, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇳🇱 donarev419	2026-07-12 04:08:13 (4 days ago)	Connection to port 784 with data transfer. Data preview: �	Port Scan Hacking

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.181.123.104

🇩🇪 92.208.179.65

🇺🇸 69.164.193.254

🇰🇷 222.116.25.156

🇧🇷 205.210.31.208

🇩🇪 194.88.98.90

🇳🇱 193.176.31.254

🇵🇱 176.53.159.197

🇰🇷 175.215.243.120

🇩🇪 172.104.229.171

🇸🇪 171.25.158.80

🇮🇳 117.221.30.179

🇳🇱 103.74.134.48

🇰🇷 101.36.114.225

🇫🇷 91.196.152.236

🇧🇬 91.92.47.208

🇩🇪 69.5.169.110

🇻🇳 58.186.20.101

🇪🇸 45.157.187.12

🇺🇸 44.185.20.242