JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.20.216

165.154.20.216 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 12%: ?

12%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.20.216

Whois 165.154.20.216

IP Abuse Reports for 165.154.20.216:

This IP address has been reported a total of 224 times from 132 distinct sources. 165.154.20.216 was first reported on October 29th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-25 20:38:17 (3 weeks ago)	ICS Labs identified 165.154.20.216 as a malicious indicator from threat intelligence.	Hacking
🇺🇸 dotnetdork	2026-07-03 00:33:38 (1 month ago)	SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Cons ... show more SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot. show less	Brute-Force SSH
🇮🇳 evicky2002	2026-06-26 05:53:22 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇭 YF	2026-05-18 22:35:47 (3 months ago)	Pays blacklisté (HK)	Brute-Force Web App Attack
🇧🇷 ICS Labs	2026-05-18 21:02:21 (3 months ago)	ICS Labs identified 165.154.20.216 as a malicious indicator from threat intelligence.	Hacking
🇫🇷 SpaceHost-Server	2026-04-26 22:36:37 (3 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-24 22:52:53 (3 months ago)	ThreatBook Intelligence: Zombie,Brute Force more details on https://threatbook.io/ip/165.154.20.216	SSH
🇫🇷 SpaceHost-Server	2026-04-24 22:35:49 (3 months ago)		Brute-Force Web App Attack
🇩🇪 marcel-knorr.de	2026-04-24 05:11:20 (3 months ago)	[mail-backup-2] SSH login failed	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 05:07:26 (3 months ago)	(sshd) Failed SSH login from 165.154.20.216 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Dir ... show more (sshd) Failed SSH login from 165.154.20.216 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 24 00:05:25 17679 sshd[30633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.216 user=root Apr 24 00:05:27 17679 sshd[30633]: Failed password for root from 165.154.20.216 port 17868 ssh2 Apr 24 00:06:23 17679 sshd[30714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.216 user=root Apr 24 00:06:24 17679 sshd[30714]: Failed password for root from 165.154.20.216 port 35800 ssh2 Apr 24 00:07:20 17679 sshd[30797]: Invalid user ftptest from 165.154.20.216 port 53710 show less	Brute-Force SSH
🇬🇧 blik2108	2026-04-24 05:06:53 (3 months ago)	2026-04-24T05:06:50.840185+00:00 vm22 sshd-session[3312541]: Connection from 165.154.20.216 port 204 ... show more 2026-04-24T05:06:50.840185+00:00 vm22 sshd-session[3312541]: Connection from 165.154.20.216 port 20454 on 139.59.189.208 port 22 rdomain "" 2026-04-24T05:06:52.177031+00:00 vm22 sshd-session[3312541]: Invalid user ftptest from 165.154.20.216 port 20454 ... show less	Brute-Force SSH
🇿🇦 Poseidonn77	2026-04-24 02:58:23 (3 months ago)	2026-04-24T04:52:37.291107+02:00 personal.mjdk.io sshd-session[1560727]: Invalid user user1 from 165 ... show more 2026-04-24T04:52:37.291107+02:00 personal.mjdk.io sshd-session[1560727]: Invalid user user1 from 165.154.20.216 port 19924 2026-04-24T04:53:37.805178+02:00 personal.mjdk.io sshd-session[1560751]: Invalid user aovalle from 165.154.20.216 port 37750 2026-04-24T04:54:34.063669+02:00 personal.mjdk.io sshd-session[1560764]: Invalid user iulian from 165.154.20.216 port 55536 2026-04-24T04:57:28.487888+02:00 personal.mjdk.io sshd-session[1560786]: Invalid user claude from 165.154.20.216 port 53974 2026-04-24T04:58:22.449160+02:00 personal.mjdk.io sshd-session[1560796]: Invalid user steam from 165.154.20.216 port 16776 ... show less	Brute-Force SSH
🇫🇷 Lunix	2026-04-24 02:52:00 (3 months ago)		FTP Brute-Force Brute-Force
🇺🇸 bigscoots.com	2026-04-24 02:50:23 (3 months ago)	165.154.20.216 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 165.154.20.216 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 21:28:09 15376 sshd[19362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.186.175 user=root Apr 23 21:28:11 15376 sshd[19362]: Failed password for root from 144.31.186.175 port 36476 ssh2 Apr 23 21:50:17 15376 sshd[21112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.216 user=root Apr 23 21:50:19 15376 sshd[21112]: Failed password for root from 165.154.20.216 port 12424 ssh2 Apr 23 21:29:08 15376 sshd[19437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.186.175 user=root IP Addresses Blocked: 144.31.186.175 (DE/Germany/-) show less	Brute-Force SSH
🇵🇱 webadmin	2026-04-24 02:50:20 (3 months ago)	2026-04-24T04:21:00.633921+02:00 www sshd-session[2052513]: Failed password for invalid user sammy f ... show more 2026-04-24T04:21:00.633921+02:00 www sshd-session[2052513]: Failed password for invalid user sammy from 165.154.20.216 port 62016 ssh2 2026-04-24T04:21:01.238842+02:00 www sshd-session[2052513]: Disconnected from invalid user sammy 165.154.20.216 port 62016 [preauth] 2026-04-24T04:50:17.109610+02:00 www sshd-session[2053201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.216 user=root 2026-04-24T04:50:18.882222+02:00 www sshd-session[2053201]: Failed password for root from 165.154.20.216 port 23628 ssh2 2026-04-24T04:50:20.715831+02:00 www sshd-session[2053201]: Disconnected from authenticating user root 165.154.20.216 port 23628 [preauth] show less	Brute-Force SSH

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.95

🇭🇰 199.45.155.110

🇨🇳 175.6.109.238

🇳🇱 173.194.169.18

🇨🇳 117.187.185.40

🇫🇷 94.23.188.215

🇫🇷 91.231.89.128

🇳🇱 91.92.42.126

🇳🇱 89.21.67.187

🇺🇸 70.89.116.5

🇺🇸 64.62.156.116

🇳🇱 45.198.224.26

🇺🇸 45.131.193.49

🇷🇴 2.57.122.238

🇨🇳 222.71.205.34

🇵🇾 186.17.177.132

🇨🇳 182.119.226.219

🇻🇳 171.231.180.167

🇺🇸 162.216.149.38

🇺🇸 147.185.132.119