165.154.218.176

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
253 reports
158 reporters · latest 28 minutes ago
ISP
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135377
Domain Name
ucloud.cn
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
253 from 158 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 56 🇩🇪 Germany 41 🇫🇷 France 29
Most common categories Web App Attack 145 Port Scan 95 Hacking 76 Bad Web Bot 44 Brute-Force 24
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:80) [srv1]
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 21 hits on ports [80, 443] (automated)
Port Scan Web App Attack
🇺🇸 MPL
tcp/443 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp ports: 443,80 (4 or more attempts)
Port Scan
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:80) [srv2]
Port Scan Hacking
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/web-asn-lockdown-high.
Bad Web Bot Web App Attack
Anonymous
Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 80/tcp (HTTP))
Port Scan
🇩🇪 hotzmatic
Suricata IDS: ET SCAN NMAP -sS window 1024 (1 events observed on private honeypot sensor)
Port Scan
🇹🇭 Sawasdee
Unwanted checking 80 or 443 port ...
Bad Web Bot
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 227 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-06T23:44:02Z
Port Scan Hacking
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:443) [srv2]
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 80) Source port: 55471 TTL: 240 Packet length: 40 TOS: 0x08 This report (for 165.154.218.176) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=55471 dstport=443
Port Scan
🇺🇸 MPL
tcp/443 (6 or more attempts)
Port Scan
🇵🇱 Tankudoraiba
Unauthorized connection attempts on ports 443|80
Port Scan Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 87.90.174.167
🇺🇸 66.132.195.51
🇧🇷 45.226.133.169
🇨🇦 45.198.224.156
🇺🇸 35.254.94.87
🇫🇮 34.88.41.70
🇷🇴 2.57.122.168
🇮🇩 216.243.118.2
🇨🇭 179.43.153.2
🇩🇪 167.94.145.23
🇮🇩 103.159.199.43
🇸🇬 43.173.177.221
🇺🇸 199.242.184.75
🇺🇸 195.184.76.239
🇳🇱 192.253.248.223
🇨🇴 190.217.19.188
feedback