JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.20.228

165.154.20.228 was found in our database!

This IP was reported 2,004 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.20.228

Whois 165.154.20.228

IP Abuse Reports for 165.154.20.228:

This IP address has been reported a total of 2,004 times from 842 distinct sources. 165.154.20.228 was first reported on March 2nd 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Arsh	2026-03-03 17:13:31 (3 months ago)	2026-03-03T17:05:08.337756+00:00 v2202502255267314709 sshd[2437114]: User root from 165.154.20.228 n ... show more 2026-03-03T17:05:08.337756+00:00 v2202502255267314709 sshd[2437114]: User root from 165.154.20.228 not allowed because not listed in AllowUsers 2026-03-03T17:06:44.897724+00:00 v2202502255267314709 sshd[2438442]: User root from 165.154.20.228 not allowed because not listed in AllowUsers 2026-03-03T17:07:53.527054+00:00 v2202502255267314709 sshd[2439411]: User root from 165.154.20.228 not allowed because not listed in AllowUsers 2026-03-03T17:12:23.233344+00:00 v2202502255267314709 sshd[2443230]: User root from 165.154.20.228 not allowed because not listed in AllowUsers 2026-03-03T17:13:30.267070+00:00 v2202502255267314709 sshd[2444250]: User root from 165.154.20.228 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 17:07:02 (3 months ago)	165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 3 11:06:26 9105 sshd[17189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.191.244.236 user=root Mar 3 11:06:28 9105 sshd[17189]: Failed password for root from 160.191.244.236 port 50160 ssh2 Mar 3 11:06:47 9105 sshd[17193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 11:05:16 9105 sshd[17037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 11:05:18 9105 sshd[17037]: Failed password for root from 165.154.20.228 port 36756 ssh2 IP Addresses Blocked: 160.191.244.236 (VN/Vietnam/-) show less	Brute-Force SSH
🇺🇸 whitehat AbuseIPDB Official	2026-03-03 16:44:02 (3 months ago)	2026-03-03T16:40:21.306260shield sshd\[6163\]: pam_unix\(sshd:auth\): authentication failure\; logna ... show more 2026-03-03T16:40:21.306260shield sshd\[6163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T16:40:23.304844shield sshd\[6163\]: Failed password for root from 165.154.20.228 port 52718 ssh2 2026-03-03T16:42:40.759850shield sshd\[6734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T16:42:42.829620shield sshd\[6734\]: Failed password for root from 165.154.20.228 port 31414 ssh2 2026-03-03T16:44:01.606735shield sshd\[6856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 16:43:14 (3 months ago)	165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 3 10:42:58 15488 sshd[21027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 10:41:13 15488 sshd[20951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 10:41:15 15488 sshd[20951]: Failed password for root from 165.154.20.228 port 19962 ssh2 Mar 3 10:41:23 15488 sshd[20956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.121.21 user=root Mar 3 10:41:25 15488 sshd[20956]: Failed password for root from 159.89.121.21 port 40948 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 Sayrix	2026-03-03 16:21:26 (3 months ago)	Mar 3 16:18:14 fra-1 sshd[3576693]: Failed password for root from 165.154.20.228 port 58014 ssh2 Ma ... show more Mar 3 16:18:14 fra-1 sshd[3576693]: Failed password for root from 165.154.20.228 port 58014 ssh2 Mar 3 16:19:49 fra-1 sshd[3576707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 16:19:50 fra-1 sshd[3576707]: Failed password for root from 165.154.20.228 port 32958 ssh2 Mar 3 16:21:23 fra-1 sshd[3576717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 16:21:25 fra-1 sshd[3576717]: Failed password for root from 165.154.20.228 port 62924 ssh2 ... show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-03-03 16:16:09 (3 months ago)	2026-03-03T18:16:07.312803+02:00 mummo sshd[689241]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-03-03T18:16:07.312803+02:00 mummo sshd[689241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T18:16:09.362835+02:00 mummo sshd[689241]: Failed password for root from 165.154.20.228 port 35808 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 16:14:38 (3 months ago)	165.154.20.228 (HK/Hong Kong/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 165.154.20.228 (HK/Hong Kong/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 3 10:05:36 14966 sshd[19417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.179.102.248 user=root Mar 3 09:52:31 14966 sshd[17646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.179.102.248 user=root Mar 3 09:52:33 14966 sshd[17646]: Failed password for root from 118.179.102.248 port 56156 ssh2 Mar 3 10:02:39 14966 sshd[19028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.179.102.248 user=root Mar 3 10:02:40 14966 sshd[19028]: Failed password for root from 118.179.102.248 port 43636 ssh2 Mar 3 10:14:29 14966 sshd[20682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root IP Addresses Blocked: 118.179.102.248 (BD/Bangladesh/-) show less	Brute-Force SSH
🇸🇪 hhmm	2026-03-03 15:51:43 (3 months ago)	2026-03-03T18:43:21.211451+03:00 atom sshd-session[187496]: Failed password for root from 165.154.20 ... show more 2026-03-03T18:43:21.211451+03:00 atom sshd-session[187496]: Failed password for root from 165.154.20.228 port 40606 ssh2 2026-03-03T18:45:55.738673+03:00 atom sshd-session[187541]: Failed password for root from 165.154.20.228 port 27422 ssh2 2026-03-03T18:47:50.732498+03:00 atom sshd-session[187600]: Failed password for root from 165.154.20.228 port 63762 ssh2 2026-03-03T18:49:44.577877+03:00 atom sshd-session[187639]: Failed password for root from 165.154.20.228 port 45040 ssh2 2026-03-03T18:51:42.399268+03:00 atom sshd-session[187722]: Failed password for root from 165.154.20.228 port 26574 ssh2 ... show less	SSH
🇬🇧 Steve	2026-03-03 15:45:42 (3 months ago)	SSH invalid-user multiple login attempts	SSH Brute-Force
🇩🇪 24-seven.io	2026-03-03 15:17:06 (3 months ago)	2026-03-03T16:12:57.290354+01:00 srv02 sshd-session[3909149]: Failed password for root from 165.154. ... show more 2026-03-03T16:12:57.290354+01:00 srv02 sshd-session[3909149]: Failed password for root from 165.154.20.228 port 39780 ssh2 2026-03-03T16:15:01.670942+01:00 srv02 sshd-session[3910485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T16:15:03.785330+01:00 srv02 sshd-session[3910485]: Failed password for root from 165.154.20.228 port 23970 ssh2 2026-03-03T16:17:03.730555+01:00 srv02 sshd-session[3911857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T16:17:05.621976+01:00 srv02 sshd-session[3911857]: Failed password for root from 165.154.20.228 port 62990 ssh2 ... show less	Brute-Force SSH
🇧🇷 helix	2026-03-03 15:11:59 (3 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 14:32:15 (3 months ago)	165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 165.154.20.228 (HK/Hong Kong/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 3 08:31:33 15452 sshd[11217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.10.45.145 user=root Mar 3 08:31:35 15452 sshd[11217]: Failed password for root from 202.10.45.145 port 40316 ssh2 Mar 3 08:32:07 15452 sshd[11289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 08:26:29 15452 sshd[10542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root Mar 3 08:26:30 15452 sshd[10542]: Failed password for root from 165.154.20.228 port 56192 ssh2 IP Addresses Blocked: 202.10.45.145 (ID/Indonesia/-) show less	Brute-Force SSH
🇧🇷 ViniSchneider	2026-03-03 14:03:51 (3 months ago)	2026-03-03T10:59:17.298718-03:00 Vini-Server sshd[374838]: Failed password for root from 165.154.20. ... show more 2026-03-03T10:59:17.298718-03:00 Vini-Server sshd[374838]: Failed password for root from 165.154.20.228 port 16784 ssh2 2026-03-03T11:01:29.076183-03:00 Vini-Server sshd[374986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T11:01:31.017713-03:00 Vini-Server sshd[374986]: Failed password for root from 165.154.20.228 port 58714 ssh2 2026-03-03T11:03:48.296792-03:00 Vini-Server sshd[375026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.20.228 user=root 2026-03-03T11:03:50.458911-03:00 Vini-Server sshd[375026]: Failed password for root from 165.154.20.228 port 45558 ssh2 ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-03-03 13:59:15 (3 months ago)	SSH brute-force attempt detected after 3 failed login attempts from HYEHOST infrastructure	Brute-Force SSH
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-03-03 13:54:46 (3 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	SSH Brute-Force DDoS Attack

Showing 1936 to 1950 of 2004 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.35

🇬🇧 195.206.182.207

🇨🇳 175.178.128.72

🇳🇱 172.235.173.150

🇺🇸 172.69.17.78

🇻🇳 42.117.173.238

🇻🇳 180.93.36.16

🇪🇬 156.199.107.218

🇳🇱 45.198.224.5

🇳🇱 45.148.10.157

🇹🇼 45.43.37.254

🇺🇸 20.29.22.156

🇷🇴 2.57.122.238

🇩🇪 213.209.159.228

🇹🇼 198.235.24.52

🇸🇬 193.37.32.34

🇧🇷 187.72.128.177

🇨🇴 179.33.186.150

🇳🇱 162.159.113.83

🇸🇪 158.174.210.161