JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.201

165.154.163.201 was found in our database!

This IP was reported 1,474 times. Confidence of Abuse is 74%: ?

74%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.201

Whois 165.154.163.201

IP Abuse Reports for 165.154.163.201:

This IP address has been reported a total of 1,474 times from 112 distinct sources. 165.154.163.201 was first reported on January 31st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 mkaraki	2026-05-28 23:26:25 (1 week ago)	1780010784 # Service_probe # SIGNATURE_SEND # source_ip:165.154.163.201 # dst_port:133 ...	Port Scan
🇩🇪 Honeypot-EU-Fru	2026-05-26 03:21:42 (2 weeks ago)	1779765700 - 05/26/2026 05:21:40 Host: 165.154.163.201/165.154.163.201 Port: 111 TCP Blocked ...	Port Scan
🇮🇳 evicky2002	2026-05-20 06:29:07 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 donarev419	2026-05-18 06:57:06 (3 weeks ago)	Connection to port 75 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 donarev419	2026-05-17 06:02:56 (3 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:8181 User-Agent: Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebK show less	Port Scan Hacking
🇳🇱 donarev419	2026-05-16 03:48:05 (3 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; show less	Port Scan Hacking
🇳🇱 donarev419	2026-05-16 02:12:26 (3 weeks ago)	Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 ... show more Connection to port 8181 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8181 User-Agent: Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537 show less	Port Scan Hacking
🇩🇪 Justin F. \| AS204464	2026-05-16 00:53:02 (3 weeks ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; In ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15 Accept-Encoding: gzip; 8181 [10] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-15 23:59:57 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0 Accept-Encoding: gzip; 8181 [6] TCP show less	Web App Attack
🇵🇱 sefinek.net	2026-05-15 20:33:37 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15 Accept-Encoding: gzip; 8181 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 ICS Labs	2026-05-12 01:35:28 (4 weeks ago)	ICS Labs identified 165.154.163.201 as a malicious indicator from threat intelligence.	Hacking
🇺🇸 technash	2026-05-11 12:34:31 (4 weeks ago)	Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ... show more Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. show less	Port Scan
🇦🇺 FireGuard Server	2026-05-11 06:00:07 (4 weeks ago)	Blocked by OPNsense firewall; 11 hits, proto=tcp, ports=443	Port Scan Hacking
🇬🇧 poundawebsiteltd	2026-05-10 18:01:15 (1 month ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 165.154.163.201 - - [10/May/2026 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 165.154.163.201 - - [10/May/2026:19:01:13 +0100] GET / HTTP/1.1 403 2829 - Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0 show less	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-05-10 15:14:59 (1 month ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (X11; Linux i68 ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0 show less	Port Scan Web App Attack Bad Web Bot

Showing 1 to 15 of 1474 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.241

🇵🇱 188.212.135.123

🇲🇾 49.124.153.64

🇦🇷 190.244.39.224

🇺🇸 162.216.149.242

🇮🇩 103.151.140.97

🇫🇷 51.178.198.251

🇧🇷 45.205.1.246

🇺🇸 8.231.249.128

🇷🇴 2.57.121.112

🇺🇸 216.25.89.94

🇺🇸 173.26.185.131

🇩🇪 167.94.146.39

🇳🇱 160.119.76.47

🇸🇪 155.4.244.107

🇫🇮 135.181.16.155

🇮🇳 103.75.32.1

🇩🇪 64.89.163.156

🇩🇪 57.129.69.65

🇬🇧 35.203.210.127