JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.25

165.154.163.25 was found in our database!

This IP was reported 1,556 times. Confidence of Abuse is 91%: ?

91%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.25

Whois 165.154.163.25

IP Abuse Reports for 165.154.163.25:

This IP address has been reported a total of 1,556 times from 126 distinct sources. 165.154.163.25 was first reported on January 31st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 sandra361	2026-06-21 16:03:21 (1 day ago)	Port scan detected: 18 attempts across 1 ports (4433). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.15 ... show more Port scan detected: 18 attempts across 1 ports (4433). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.163.25 LEN=60 TOS=0x14 PREC=0x00 TTL=52 ID=26573 DF PROTO=TCP SPT=47974 DPT=4433 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 sandra361	2026-06-21 12:26:01 (1 day ago)	Port scan detected: 21 attempts across 1 ports (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.15 ... show more Port scan detected: 21 attempts across 1 ports (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154.163.25 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=34927 DF PROTO=TCP SPT=45990 DPT=4433 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Port Scan
🇸🇪 SkyDancer	2026-06-21 12:07:54 (1 day ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇺🇸 masterguru	2026-06-20 11:33:59 (2 days ago)	Host header is a numeric IP address. Pattern match "^ (920350-165)	Hacking Bad Web Bot
🇬🇧 OptimusGO	2026-06-20 02:18:14 (2 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-20 03:18:14 UTC Log evidence: 165.154.163.25 - - [20/Jun/2026:03:14:42 +0100] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.1" 165.154.163.25 - - [20/Jun/2026:03:18:13 +0100] "GET /favicon.ico HTTP/1.1" 404 118 "-" "Go-http-client/1.1" 06/20/2026-03:18:13.584023 [] [1:1000201:1] SCANNER: Bot-like User-Agent Detected [] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 165.154.163.25:46206 -> 185.127.18.66:80 show less	Port Scan Brute-Force
🇺🇸 Starburst SysOp Team	2026-06-19 06:02:23 (3 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-1)	Hacking Bad Web Bot
🇫🇷 TheHoneyPotter	2026-06-18 10:00:01 (4 days ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 1900 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Ma ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 1900 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Accept-Encoding: gzip; 1900 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 BIV	2026-06-14 15:11:38 (1 week ago)	Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DSh ... show more Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇭🇰 Harold Wong	2026-06-14 10:22:49 (1 week ago)	$f2bV_matches	Brute-Force
🇧🇷 diego	2026-06-14 03:45:50 (1 week ago)	[probe-68-69] 2026-06-14 03:28:44, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-06-14 03:28:44, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇪🇸 librebit	2026-06-14 02:57:12 (1 week ago)	Brute force	Brute-Force
🇧🇷 diego	2026-06-13 03:15:20 (1 week ago)	[probe-44-49] 2026-06-13 02:59:10, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-13 02:59:10, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-13 02:20:20 (1 week ago)	[probe-44-49] 2026-06-13 02:02:50, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-13 02:02:50, Client: 165.154.163.25, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇵🇱 Wepted	2026-06-12 07:15:25 (1 week ago)	Port scan detected by honeypot	Port Scan Hacking
🇵🇱 sefinek.net	2026-06-12 02:57:36 (1 week ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1 Accept-Encoding: gzip; 8181 [14] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 1556 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.144

🇫🇷 94.183.188.148

🇵🇱 83.168.89.49

🇦🇺 81.21.233.75

🇫🇷 62.210.207.172

🇫🇷 51.68.111.214

🇬🇧 35.203.210.64

🇧🇷 2804:2484:9904:c200:b09e:2b3e:2f12:5a47

🇧🇷 187.92.28.238

🇳🇱 185.93.89.114

🇯🇵 157.7.200.152

🇺🇸 147.185.132.60

🇬🇧 92.207.4.157

🇳🇱 45.148.10.152

🇳🇬 41.207.248.198

🇨🇳 182.110.173.121

🇰🇷 175.213.137.209

🇺🇸 162.243.147.237

🇺🇸 154.83.197.167

🇺🇸 152.32.235.187