165.154.43.180

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
74% Elevated
19 reports
18 reporters · latest 5 hours ago
ISP
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135377
Domain Name
ucloud.cn
Country
🇭🇰 Hong Kong
City
Hong Kong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇴 Colombia 2 🇩🇪 Germany 2 🇹🇷 Turkey 2
Most common categories Port Scan 11 SSH 6 Hacking 4 Brute-Force 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp ports: 2222,22 (8 or more attempts)
Port Scan
🇧🇾 stroytrest
2026-11-15T10:48:43.821745+03:00 gate kernel: [3791213.709260] nftables: JAIL-SSH IN=wan OUT= MAC= SRC=165.154.43.180 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=58675 DF PROTO=TCP SPT=59172 DPT=22 WINDOW=64952 RES=0x00 SYN URGP=0 ...
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-13 UTC.
Hacking
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (8 events in 5min) at 2026-11-13 07:42
Hacking
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=18390 dstport=2222
Port Scan Hacking
🇨🇴 juan_mesa
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
Port Scan SSH
🇹🇷 crnpekgoz
SSH authentication failed for user 'NL5xUDpV2xRa' from 165.154.43.180 port 22 using password. Detected and blocked by WardenGuard IPS (Stateful Threat Engine).
Brute-Force SSH
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 2222 proto 6 detection dark_ip
Port Scan
🇫🇷 Petre 21_ip
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 wupinyin
SSH login brute-force against a git server [6 events, 2026-11-03T07:50:17Z; auto-reported by CrowdSec]
Brute-Force SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇬🇧 Aetherweb Ark
*Port Scan* detected from 165.154.43.180 (HK/Hong Kong/-). N in the last X seconds
Port Scan
🇨🇴 juan_mesa
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
Port Scan SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 195.96.139.116
🇬🇧 185.247.137.76
🇨🇳 180.76.97.104
🇨🇭 179.43.153.18
🇨🇴 179.33.147.119
🇳🇱 176.65.149.224
🇺🇸 172.234.192.95
🇺🇸 159.89.229.92
🇺🇸 154.51.243.197
🇵🇰 153.117.38.203
🇮🇳 117.251.157.227
🇻🇳 103.195.238.14
🇮🇳 98.70.88.32
🇮🇳 98.70.50.166
🇮🇳 98.70.45.38
🇮🇳 59.184.242.144
🇰🇭 58.97.216.178
🇺🇸 54.193.227.112
🇬🇧 35.203.210.125
🇺🇸 34.219.164.56
feedback