JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.20

165.154.163.20 was found in our database!

This IP was reported 1,438 times. Confidence of Abuse is 81%: ?

81%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.20

Whois 165.154.163.20

IP Abuse Reports for 165.154.163.20:

This IP address has been reported a total of 1,438 times from 117 distinct sources. 165.154.163.20 was first reported on June 14th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-06-19 05:00:20 (3 days ago)	[probe-44-49] 2026-06-19 04:41:22, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-19 04:41:22, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 sandra361	2026-06-18 10:05:44 (4 days ago)	Port scan detected: 5 attempts across 1 ports (1900). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=165.1 ... show more Port scan detected: 5 attempts across 1 ports (1900). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=165.154.163.20 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=23918 DF PROTO=TCP SPT=57846 DPT=1900 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-18 10:04:00 (4 days ago)	Honeypot hit: HTTP/1.1 request on 1900 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 1900 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Accept-Encoding: gzip; 1900 [6] TCP show less	Hacking Bad Web Bot
🇨🇿 Prcek	2026-06-18 09:31:14 (4 days ago)	PortScan:HOST=165.154.163.20,DPORTS=443	Port Scan
🇵🇱 dzpk	2026-06-18 05:09:44 (4 days ago)	[18/Jun/2026:07:04:20 +0200] 178175906069.893171 165.154.163.20 54126 HOST 443 [18/Jun/2026:07:04:22 ... show more [18/Jun/2026:07:04:20 +0200] 178175906069.893171 165.154.163.20 54126 HOST 443 [18/Jun/2026:07:04:22 +0200] 178175906271.217319 165.154.163.20 54136 HOST 443 [18/Jun/2026:07:09:44 +0200] 178175938489.901057 165.154.163.20 39950 HOST 443 show less	Web App Attack
🇭🇰 sandra361	2026-06-18 01:52:22 (5 days ago)	Port scan detected: 18 attempts across 1 ports (5000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.15 ... show more Port scan detected: 18 attempts across 1 ports (5000). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.163.20 LEN=60 TOS=0x14 PREC=0x00 TTL=52 ID=19845 DF PROTO=TCP SPT=40196 DPT=5000 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 hbrks	2026-06-17 01:57:37 (6 days ago)	9 attack(s) detected, such as these: {"event":"web_block","ip":"165.154.163.20","host":"185.207.107. ... show more 9 attack(s) detected, such as these: {"event":"web_block","ip":"165.154.163.20","host":"185.207.107.155","request":"GET /favicon.ico HTTP/1.1","user_agent":"","reason":"Status-503","timestamp":"2026-06-17T01:57:37 00:00","logentry":"185.207.107.155 165.154.163.20 - - [17/Jun/2026:01:57:37 0000] \"GET /favicon.ico HTTP/1.1\" 503 190 \"-\" \"Go-http-client/1.1\" \"-\""} * Report Details : https://p4u.xyz/QL0749NSBLU/1 IP Details *: https://p4u.xyz/QL0749NSBLU/2 show less	Web Spam Hacking Bad Web Bot
🇳🇿 Antinson	2026-06-14 15:11:29 (1 week ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇭🇰 Harold Wong	2026-06-14 10:19:04 (1 week ago)	$f2bV_matches	Brute-Force
🇧🇷 diego	2026-06-14 05:40:50 (1 week ago)	[probe-68-69] 2026-06-14 05:24:20, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-06-14 05:24:20, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 kosada.com	2026-06-14 00:34:03 (1 week ago)	Web vulnerability probing (bogus request)	Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-13 20:47:51 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-13)	Hacking Bad Web Bot
🇩🇪 HoneyPot-FrPri	2026-06-12 13:20:29 (1 week ago)	165.154.163.20 - - [12/Jun/2026:15:20:28 +0200] "x16x03x01x05xC4x01x00x05xC0x03x03xCC!xC8x07xA9x9Ex0 ... show more 165.154.163.20 - - [12/Jun/2026:15:20:28 +0200] "x16x03x01x05xC4x01x00x05xC0x03x03xCC!xC8x07xA9x9Ex01xA5xBExBAx04x08`qxBEBx04bxFExF6x8ExEDxEADxE2xAFVx91Vpx03) *xE8x1 ... show less	Bad Web Bot Web App Attack
🇧🇷 diego	2026-06-06 02:30:20 (2 weeks ago)	[probe-44-49] 2026-06-06 02:14:58, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-06 02:14:58, Client: 165.154.163.20, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇨🇭 roliw	2026-05-29 15:47:00 (3 weeks ago)	Honeypot, several ports	Port Scan Brute-Force Hacking

Showing 1 to 15 of 1438 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 195.86.192.66

🇩🇪 193.124.20.228

🇺🇸 104.22.20.171

🇺🇸 68.183.137.40

🇩🇪 64.226.126.224

🇨🇦 45.145.212.165

🇩🇪 45.3.43.86

🇬🇧 35.203.211.240

🇺🇸 24.30.114.31

🇮🇳 203.115.106.74

🇩🇪 165.154.164.79

🇺🇸 162.158.167.47

🇵🇰 116.58.43.35

🇺🇸 104.22.20.198

🇨🇦 85.217.149.62

🇸🇬 47.128.18.166

🇧🇷 189.201.204.234

🇪🇨 177.53.215.134

🇳🇱 176.65.139.181

🇺🇸 172.69.135.104