JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.212.13

165.154.212.13 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Scloud Pte Ltd t/a Scloud Pte Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142002
Domain Name	scloud.sg
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.212.13

Whois 165.154.212.13

IP Abuse Reports for 165.154.212.13:

This IP address has been reported a total of 21 times from 20 distinct sources. 165.154.212.13 was first reported on October 13th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-10-17 13:20:17 (8 hours ago)	TSEC Honeypot Network report. Threat score: 78/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 78/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: galah. Context: 165.154.212.13 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇮🇹 CoreTech srl	2026-10-17 06:21:43 (15 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_da ... show more [DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,ndpi_tcp_issues,ndpi_probing_attempt show less	Hacking
🇦🇺 LiftUp Hosting	2026-10-16 07:18:24 (1 day ago)	Honeypot hit: Unauthorized traffic on 3306/mysqld	Port Scan
🇷🇸 Scan	2026-10-16 00:29:01 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2026-10-16 00:23:38 (1 day ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇩🇪 Kejult	2026-10-15 16:19:53 (2 days ago)	Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 5 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 5 application-level events across 3 source port(s). Sensor(s): RDPHoneypot, Dionaea. show less	Port Scan
🇺🇸 xmission.com	2026-10-15 13:23:07 (2 days ago)	Blocked by UFW (TCP on 7547) Source port: 14334 TTL: 103 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 7547) Source port: 14334 TTL: 103 Packet length: 44 TOS: 0x00 This report (for 165.154.212.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-15 12:31:41 (2 days ago)	2026-10-15T14:31:31.735264+02:00 vps kernel: [8438264.854675] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-15T14:31:31.735264+02:00 vps kernel: [8438264.854675] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=165.154.212.13 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x60 TTL=105 ID=42103 DF PROTO=TCP SPT=14105 DPT=7547 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-10-15 10:17:56 (2 days ago)	Oct 15 12:16:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 15 12:16:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=165.154.212.13 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=41802 DF PROTO=TCP SPT=13334 DPT=8887 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:16:37 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=165.154.212.13 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=46647 DF PROTO=TCP SPT=13335 DPT=50995 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:17:27 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=165.154.212.13 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=41035 DF PROTO=TCP SPT=13339 DPT=111 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:17:36 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=165.154.212.13 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=111 ID=45118 DF PROTO=TCP SPT=13340 DPT=829 ... show less	Port Scan
🇳🇱 VMHeaven.io	2026-10-15 06:53:13 (2 days ago)	Blocked by UFW [3306/tcp] Source port: 29377 TTL: 107 Packet length: 44	Port Scan SQL Injection
🇺🇸 Phil Schuyler	2026-10-15 00:00:00 (2 days ago)	Connection attempts to exposed MySQL service on TCP/3306. Captured by a honeypot.	Port Scan
🇺🇸 www.winos.me	2026-10-14 16:10:35 (3 days ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 NXTwoThou	2026-10-14 08:09:10 (3 days ago)	FTP closeconnection:	FTP Brute-Force
🇫🇷 Kejult	2026-10-14 06:56:57 (3 days ago)	Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target p ... show more Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 2082/service, 2095/service. Sensors: Honeytrap. show less	Port Scan
🇬🇧 NotCool	2026-10-13 21:07:54 (4 days ago)	[3600] Port Scan detected from 165.154.212.13 (DE/Germany/-). 11 hits in the last 196 seconds	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 190.112.210.251

🇺🇦 176.103.2.26

🇮🇩 103.147.159.91

🇫🇷 85.204.70.96

🇧🇷 201.92.186.12

🇳🇱 193.47.62.69

🇨🇷 179.50.177.151

🇳🇱 138.226.239.10

🇫🇷 85.217.140.36

🇫🇷 75.119.140.19

🇱🇹 45.227.254.89

🇺🇸 3.129.187.38

🇷🇴 2.57.122.238

🇺🇸 205.210.31.84

🇳🇱 195.160.223.116

🇫🇷 194.163.143.225

🇬🇧 193.163.125.131

🇫🇷 178.238.227.135

🇫🇷 173.249.40.47

🇺🇸 162.216.149.54