JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

165.154.168.34

Recent Activity

Abuse Confidence Score

100% Critical

80 reports

59 reporters · latest 2 days ago

ISP: UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type: Data Center/Web Hosting/Transit
ASN: AS135377
Domain Name: ucloud.cn
Country: 🇻🇳 Viet Nam
City: Ho Chi Minh City, Ho Chi Minh City (HCMC)

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

80 from 59 distinct reporters

First reported

October 29th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 20 🇩🇪 Germany 14 🇫🇷 France 11

Most common categories SSH 72 Brute-Force 71 Port Scan 5 Hacking 3 Web App Attack 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 marine	2026-11-12 17:58:56 UTC · (2 days ago)	SSH brute-force server2 attack from 165.154.168.34, blocked by Fail2Ban.	SSH Brute-Force
🇿🇦 updown.io	2026-11-12 17:25:55 UTC · (2 days ago)	2026-11-12T17:25:44.943997+00:00 cap.updn.io sshd[2940023]: Failed password for root from 165.154.168.34 port 37620 ssh2 2026-11-12T17:25:47.774106+00:00 cap.updn.io sshd[2940219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2026-11-12T17:25:44.943997+00:00 cap.updn.io sshd[2940023]: Failed password for root from 165.154.168.34 port 37620 ssh2 2026-11-12T17:25:47.774106+00:00 cap.updn.io sshd[2940219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-12T17:25:49.989950+00:00 cap.updn.io sshd[2940219]: Failed password for root from 165.154.168.34 port 37622 ssh2 2026-11-12T17:25:52.800378+00:00 cap.updn.io sshd[2940440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-12T17:25:55.036232+00:00 cap.updn.io sshd[2940440]: Failed password for root from 165.154.168.34 port 47872 ssh2 ... show less	Brute-Force SSH
🇺🇸 r	2026-11-12 14:23:42 UTC · (2 days ago)	Nov 12 14:23:39 vpn sshd[242550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root Nov 12 14:23:41 vpn sshd[242550]: Failed password for root from 165.154.168.34 port 45556 ssh2 ...	Brute-Force SSH
🇸🇪 wrecker1602	2026-11-11 09:58:44 UTC · (4 days ago)	2026-11-11T09:58:26.960283+00:00 WreckersBox sshd[39613]: Failed password for root from 165.154.168.34 port 51026 ssh2 2026-11-11T09:58:41.053734+00:00 WreckersBox sshd[39615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss ... show more 2026-11-11T09:58:26.960283+00:00 WreckersBox sshd[39613]: Failed password for root from 165.154.168.34 port 51026 ssh2 2026-11-11T09:58:41.053734+00:00 WreckersBox sshd[39615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-11T09:58:43.313667+00:00 WreckersBox sshd[39615]: Failed password for root from 165.154.168.34 port 55120 ssh2 ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-11-11 02:00:21 UTC · (4 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 uira.live	2026-11-11 01:16:06 UTC · (4 days ago)	Nov 11 01:16:00 uiravps sshd[301691]: Failed password for root from 165.154.168.34 port 40078 ssh2 Nov 11 01:16:03 uiravps sshd[302438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root ... show more Nov 11 01:16:00 uiravps sshd[301691]: Failed password for root from 165.154.168.34 port 40078 ssh2 Nov 11 01:16:03 uiravps sshd[302438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root Nov 11 01:16:05 uiravps sshd[302438]: Failed password for root from 165.154.168.34 port 40094 ssh2 ... show less	Brute-Force SSH
🇳🇱 ras07	2026-11-10 15:00:07 UTC · (4 days ago)	Brute force SSH login attempts.	Brute-Force SSH
Anonymous	2026-11-10 14:53:15 UTC · (4 days ago)	Fail2Ban: Brute-force attack detected on SSH port	Brute-Force SSH
🇧🇬 MazenHost	2026-11-10 14:19:29 UTC · (4 days ago)	Nov 10 16:19:14 fastdl sshd[833529]: Failed password for root from 165.154.168.34 port 47506 ssh2 Nov 10 16:19:16 fastdl sshd[833613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root N ... show more Nov 10 16:19:14 fastdl sshd[833529]: Failed password for root from 165.154.168.34 port 47506 ssh2 Nov 10 16:19:16 fastdl sshd[833613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root Nov 10 16:19:19 fastdl sshd[833613]: Failed password for root from 165.154.168.34 port 47516 ssh2 Nov 10 16:19:21 fastdl sshd[833657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root Nov 10 16:19:23 fastdl sshd[833657]: Failed password for root from 165.154.168.34 port 50482 ssh2 Nov 10 16:19:26 fastdl sshd[833741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root Nov 10 16:19:28 fastdl sshd[833741]: Failed password for root from 165.154.168.34 port 50498 ssh2 ... show less	Brute-Force SSH
🇩🇪 marcel-knorr.de	2026-11-10 09:17:20 UTC · (5 days ago)	[fwbs-web] SSH login failed	Brute-Force SSH
🇩🇪 SirReGa	2026-11-09 10:21:17 UTC · (6 days ago)	2026-11-09T10:21:10.062817+00:00 debian-8gb-fsn1-1 sshd-session[3699705]: Failed password for root from 165.154.168.34 port 33596 ssh2 2026-11-09T10:21:11.180129+00:00 debian-8gb-fsn1-1 sshd-session[3700163]: pam_unix(sshd:auth): authentication failu ... show more 2026-11-09T10:21:10.062817+00:00 debian-8gb-fsn1-1 sshd-session[3699705]: Failed password for root from 165.154.168.34 port 33596 ssh2 2026-11-09T10:21:11.180129+00:00 debian-8gb-fsn1-1 sshd-session[3700163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-09T10:21:12.962798+00:00 debian-8gb-fsn1-1 sshd-session[3700163]: Failed password for root from 165.154.168.34 port 33610 ssh2 2026-11-09T10:21:15.648173+00:00 debian-8gb-fsn1-1 sshd-session[3700601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-09T10:21:16.993859+00:00 debian-8gb-fsn1-1 sshd-session[3700601]: Failed password for root from 165.154.168.34 port 33616 ssh2 ... show less	Brute-Force SSH
🇫🇷 sshboga	2026-11-08 23:15:04 UTC · (6 days ago)	SSH brute-force on cowrie honeypot port 22. 5 login attempt(s). Usernames: root. Passwords tried: team2, Li123456., Test@2022, aDm8H%MdA, [profanity].	Brute-Force SSH
🇧🇬 IVPLUS LTD	2026-11-08 10:57:04 UTC · (1 week ago)	2026-11-08T12:56:53.732913+02:00 netstat sshd[1217320]: Failed password for root from 165.154.168.34 port 54700 ssh2 2026-11-08T12:56:56.813096+02:00 netstat sshd[1217440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-11-08T12:56:53.732913+02:00 netstat sshd[1217320]: Failed password for root from 165.154.168.34 port 54700 ssh2 2026-11-08T12:56:56.813096+02:00 netstat sshd[1217440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-08T12:56:58.225661+02:00 netstat sshd[1217440]: Failed password for root from 165.154.168.34 port 54708 ssh2 2026-11-08T12:57:01.328936+02:00 netstat sshd[1217529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.168.34 user=root 2026-11-08T12:57:03.097664+02:00 netstat sshd[1217529]: Failed password for root from 165.154.168.34 port 48720 ssh2 ... show less	Brute-Force SSH
🇩🇪 WinterGateIC	2026-11-08 09:44:14 UTC · (1 week ago)	brute-force authentication attack \| kill-chain stage 4 — Exploitation \| ATT&CK:T1110 \| via auth ssh:// \| src_port=22 sev=critical conf=60% usage=Data_Center/Web_Hosting/Transit domain=ucloud.cn geo=VN sensor=ssh_monitor active=11-08 09:44..09:44Z \| r ... show more brute-force authentication attack \| kill-chain stage 4 — Exploitation \| ATT&CK:T1110 \| via auth ssh:// \| src_port=22 sev=critical conf=60% usage=Data_Center/Web_Hosting/Transit domain=ucloud.cn geo=VN sensor=ssh_monitor active=11-08 09:44..09:44Z \| raw=SSH auth session closed (user=root) \| NOVEL_PAYLOAD fp=276aec07046a \| 2026-11-08 09:44:14 UTC report#21 [community: convicted=100%] [origin=elevated-risk] [zero-day candidate, correlated with prior observed variants] show less	Brute-Force SSH Hacking
🇩🇪 UtopiaRaid.cc	2026-11-08 07:25:08 UTC · (1 week ago)	SSH brute-force: attempted root login with password(s): ------fuck------	Brute-Force SSH

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 157.245.246.76

🇳🇱 89.248.172.9

🇰🇿 89.218.51.222

🇳🇱 77.67.26.183

🇳🇱 77.67.26.179

🇺🇸 2604:2dc0:202:200::9cb

🇺🇸 157.245.129.175

🇧🇩 103.41.244.21

🇳🇱 77.67.26.172

🇳🇱 77.67.26.166

🇧🇪 34.76.67.57

🇨🇦 23.83.213.60

🇺🇸 192.253.209.121

🇬🇧 185.216.145.181

🇸🇾 178.253.95.34

🇳🇱 77.67.26.158

🇳🇱 77.67.26.150

🇺🇸 68.225.56.109

🇺🇸 65.49.1.80

🇮🇳 34.93.186.0