JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.163.3

165.154.163.3 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.163.3

Whois 165.154.163.3

IP Abuse Reports for 165.154.163.3:

This IP address has been reported a total of 126 times from 60 distinct sources. 165.154.163.3 was first reported on December 16th 2023, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-07-25 06:00:35 (18 hours ago)	Connection to port 10050 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:1005 ... show more Connection to port 10050 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:10050 User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/ show less	Port Scan Hacking
🇩🇪 guldkage	2026-07-24 21:56:52 (1 day ago)	Unauthorized connection attempt detected from IP address 165.154.163.3 to port 139 (ger-03) [Q]	Brute-Force Exploited Host
🇯🇵 mkaraki	2026-07-24 21:38:36 (1 day ago)	1784929115 # Service_probe # SIGNATURE_SEND # source_ip:165.154.163.3 # dst_port:4433 ...	Port Scan
🇦🇺 LiftUp Hosting	2026-07-24 19:27:54 (1 day ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Accept-Encoding: gzip; 8181 [7] TCP show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-07-24 15:27:45 (1 day ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Inte ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15 Accept-Encoding: gzip; 8181 [7] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 diego	2026-07-24 03:28:48 (1 day ago)	[probe-44-49] 2026-07-24 03:08:51, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-07-24 03:08:51, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇭🇰 David Shafer	2026-07-23 19:11:31 (2 days ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWe ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Accept-Encoding: gzip; 8181 [7] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇨🇦 senkodev	2026-07-23 14:24:11 (2 days ago)	2026-07-23T14:24:10.390126Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 165.154.163.3:4304 ... show more 2026-07-23T14:24:10.390126Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 165.154.163.3:43040 (158.69.22.11:2222) [session: a21100bc506d] 2026-07-23T14:24:11.529105Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 165.154.163.3:43042 (158.69.22.11:2222) [session: b5c9ce64bae6] ... show less	Brute-Force SSH
🇦🇺 specializedtom	2026-07-23 11:39:51 (2 days ago)	Fail2Ban triggered a ban on 165.154.163.3 for postfix-sasl	Phishing Email Spam Spoofing
🇩🇪 ghostwarriors	2026-07-23 10:51:10 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 femboy.cat	2026-07-22 10:41:29 (3 days ago)	Port scan to tcp/8181 from 165.154.163.3	Brute-Force
🇧🇷 diego	2026-07-22 09:18:05 (3 days ago)	[rede-188] 2026-07-22 09:00:17, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HTTP: G ... show more [rede-188] 2026-07-22 09:00:17, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-07-22 05:16:29 (3 days ago)	[probe-168-134] 2026-07-22 05:01:07, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-07-22 05:01:07, Client: 165.154.163.3, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 donarev419	2026-07-20 02:55:57 (5 days ago)	Connection to port 4433 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:4433 ... show more Connection to port 4433 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:4433 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gec show less	Port Scan Hacking
🇩🇪 sandra361	2026-07-20 02:54:01 (5 days ago)	Port scan detected: 19 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154 ... show more Port scan detected: 19 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154.163.3 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=52037 DF PROTO=TCP SPT=37190 DPT=4433 WINDOW=64952 RES=0x00 ACK FIN URGP=0 show less	Port Scan

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.140.214.28

🇻🇪 190.72.34.156

🇲🇩 185.162.141.149

🇺🇸 172.86.114.38

🇮🇹 151.15.233.104

🇮🇳 122.187.230.38

🇳🇱 89.21.67.189

🇧🇬 79.124.62.178

🇺🇸 66.132.172.47

🇯🇵 20.243.176.67

🇺🇸 20.163.13.196

🇳🇱 195.93.244.97

🇲🇾 183.171.41.105

🇮🇶 169.224.106.58

🇦🇹 150.251.225.157

🇨🇳 140.143.169.166

🇮🇳 122.187.230.250

🇰🇷 118.194.249.8

🇮🇩 103.227.144.186

🇨🇮 102.209.221.235