JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.173.175

165.154.173.175 was found in our database!

This IP was reported 330 times. Confidence of Abuse is 57%: ?

57%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.173.175

Whois 165.154.173.175

IP Abuse Reports for 165.154.173.175:

This IP address has been reported a total of 330 times from 84 distinct sources. 165.154.173.175 was first reported on May 14th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sandra361	2026-09-01 17:41:31 (15 hours ago)	Port scan detected: 6 attempts across 2 ports (139, 465). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC ... show more Port scan detected: 6 attempts across 2 ports (139, 465). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=165.154.173.175 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=50301 PROTO=TCP SPT=24229 DPT=139 WINDOW=1200 RES=0x00 RST URGP=0 show less	Port Scan
🇺🇸 shaunc	2026-08-30 17:50:13 (2 days ago)	Aug 30 12:40:43 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ... show more Aug 30 12:40:43 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=165.154.173.175 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=238 ID=14541 PROTO=TCP SPT=41821 DPT=5900 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 12:43:16 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=165.154.173.175 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=238 ID=50388 PROTO=TCP SPT=41821 DPT=139 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 12:50:01 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=165.154.173.175 DST=[redacted] LEN=44 TOS=0x08 PREC=0x20 TTL=238 ID=19921 PROTO=TCP SPT=41821 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 rellim.com	2026-08-30 17:40:40 (2 days ago)	Aug 30 10:39:51 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Aug 30 10:39:51 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=165.154.173.175 DST=204.17.205.254 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=41895 PROTO=TCP SPT=41821 DPT=5901 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 10:40:12 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=165.154.173.175 DST=204.17.205.254 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=7975 PROTO=TCP SPT=41821 DPT=1027 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 30 10:40:39 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=165.154.173.175 DST=204.17.205.254 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=48867 PROTO=TCP SPT=41821 DPT=1026 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-29 17:39:48 (3 days ago)	Blocked by UFW [7/tcp] \| SPT: 46239 \| TTL: 232 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [7/tcp] \| SPT: 46239 \| TTL: 232 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 3rdKey	2026-08-24 18:19:02 (1 week ago)	OpenCanary honeypot hit on port 123 (no legitimate service runs there); logtype 11001. Automated rep ... show more OpenCanary honeypot hit on port 123 (no legitimate service runs there); logtype 11001. Automated report. show less	Port Scan
🇺🇸 Cyber Crusader	2026-08-24 10:40:12 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇧🇷 marlorodrigues	2026-08-07 19:43:48 (3 weeks ago)	Brute Force SSH or Port Scan	Port Scan
🇺🇸 kot	2026-08-06 21:02:39 (3 weeks ago)	scan port 22, 165.154.173.175 block	Port Scan
🇺🇸 drewf.ink	2026-08-03 18:24:59 (4 weeks ago)	[18:24] Port scanning. Port(s) scanned: UDP/7, UDP/137	Port Scan
🇺🇸 wbsouza	2026-07-27 03:20:16 (1 month ago)	CrowdSec: infra/ssh22-probe — automated firewall drops on self-hosted IDS sensor	SSH Brute-Force
🇺🇸 bbiultra	2026-07-22 18:50:00 (1 month ago)	date=2026-07-22 time=13:52:24 devname=BBI-S2SV-FGT60ETK20000168 devid=FGT60ETK18059882 eventtime=178 ... show more date=2026-07-22 time=13:52:24 devname=BBI-S2SV-FGT60ETK20000168 devid=FGT60ETK18059882 eventtime=1784742743776874923 tz="-0400" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=165.154.173.175 locip=162.17.107.107 remport=20593 locport=500 show less	DDoS Attack Port Scan Spoofing VPN IP
🇺🇸 thororen	2026-07-21 17:57:39 (1 month ago)	Blocked by UFW [32768/tcp] Source port: 55288 TTL: 239 Packet length: 44 TOS: 0x00 This report was ... show more Blocked by UFW [32768/tcp] Source port: 55288 TTL: 239 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Tanados	2026-07-19 18:06:25 (1 month ago)	Blocked by UFW [5900/tcp] Source port: 47182 TTL: 233 Packet length: 44 TOS: 0x08 This report was g ... show more Blocked by UFW [5900/tcp] Source port: 47182 TTL: 233 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 SSP	2026-07-18 20:40:24 (1 month ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Brute Force, IoT Targe ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Brute Force, IoT Targeted, Port Scan, SSH Occurrences: 88 Unique Ports: 18 Destination Ports: 5900, 23, 5901, 32768, 22, 465, 139, 135, 1027, 5903, 49152, 515, 1026, 5902, 11, 1025, 7, 143 First Seen: 2026-07-18 19:40 UTC Last Seen: 2026-07-18 20:00 UTC show less	Port Scan Brute-Force SSH IoT Targeted
🇺🇸 Choice Tech LLC	2026-07-17 18:25:02 (1 month ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp,udp, ports=1027,49152,515	Port Scan Hacking

Showing 1 to 15 of 330 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.140.184.99

🇧🇷 177.200.66.42

🇨🇳 113.218.214.209

🇫🇷 77.239.124.181

🇺🇸 35.238.65.171

🇰🇷 218.149.170.253

🇰🇷 211.253.31.30

🇮🇳 183.82.156.148

🇺🇸 162.216.150.116

🇺🇸 162.216.150.20

🇦🇷 152.170.148.154

🇺🇸 107.155.48.46

🇮🇳 106.214.9.149

🇧🇬 79.124.59.186

🇫🇮 35.228.219.27

🇺🇸 35.192.176.126

🇺🇸 222.167.121.73

🇮🇷 217.60.255.130

🇳🇿 167.160.14.10

🇰🇷 150.109.254.122