165.154.61.149

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
129 reports
116 reporters ยท latest 7 hours ago
ISP
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135377
Domain Name
ucloud.cn
Country
๐Ÿ‡ญ๐Ÿ‡ฐ Hong Kong
City
Hong Kong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
129 from 116 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 34 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 18 ๐Ÿ‡ซ๐Ÿ‡ท France 16
Most common categories Brute-Force 106 SSH 100 Hacking 17 Port Scan 17 Web App Attack 11
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช razvangheorghies
Attack against a personal web server: SSH brute-force. Detected + blocked by fail2ban / nginx / firewall. Automated report.
Brute-Force SSH
๐Ÿ‡ฎ๐Ÿ‡ฑ spd.co.il
Unauthorized access attempts on ports: 22
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช razvangheorghies
Attack against a personal web server: SSH brute-force. Detected + blocked by fail2ban / nginx / firewall. Automated report.
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช fynndows.de
2026-10-26T13:35:51.473843+01:00 debian-epyc sshd[329840]: Failed password for root from 165.154.61.149 port 20206 ssh2 2026-10-26T13:38:47.396705+01:00 debian-epyc sshd[331509]: Invalid user github from 165.154.61.149 port 57046 ...
Brute-Force SSH
๐Ÿ‡ฆ๐Ÿ‡น srbigotes
Brute-Force SSH
๐Ÿ‡ท๐Ÿ‡ด focusnic.com
Multiple SSH login attempts from 165.154.61.149 targeting user(s): root | Server Managed by Focusnic
Brute-Force SSH
Anonymous
IP banned by Fail2Ban
Brute-Force SSH
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: SSH (5 total hits)
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท suble.org
$f2bV_matches
Brute-Force SSH
๐Ÿ‡ง๐Ÿ‡ท paradoxnetworks
Brute-Force SSH
๐Ÿ‡ง๐Ÿ‡ท DanielSCaldeira
mib: tentativas repetidas de conexao descartadas pelo firewall geografico; deteccao pelo fail2ban.
Port Scan Brute-Force
๐Ÿ‡น๐Ÿ‡ท crnpekgoz
SSH authentication failed for user 'root' from 165.154.61.149 port 45094 using password. Detected and blocked by WardenGuard IPS (Stateful Threat Engine).
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH โ€ข Credentials: root:Sr123456., root:PaSSw0rd, root:abc1234! โ€ข Number of login attempts: 3 โ€ข Client: SSH-2.0-libssh_0.9.6
Brute-Force SSH
๐Ÿ‡ณ๐Ÿ‡ฑ vanadrighem.eu
Automatic Fail2ban report
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ yzfdude1
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ฉ 103.43.94.109
๐Ÿ‡บ๐Ÿ‡ธ 216.45.50.44
๐Ÿ‡ฐ๐Ÿ‡ท 211.251.245.88
๐Ÿ‡ณ๐Ÿ‡ฑ 200.138.46.9
๐Ÿ‡ง๐Ÿ‡ท 191.37.151.5
๐Ÿ‡บ๐Ÿ‡พ 190.134.69.58
๐Ÿ‡ณ๐Ÿ‡ฑ 185.223.235.46
๐Ÿ‡ง๐Ÿ‡ท 177.12.183.13
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.37
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.80
๐Ÿ‡ง๐Ÿ‡ท 45.226.91.138
๐Ÿ‡จ๐Ÿ‡ณ 27.188.161.138
๐Ÿ‡บ๐Ÿ‡ธ 216.25.90.80
๐Ÿ‡ง๐Ÿ‡ฌ 193.24.211.219
๐Ÿ‡ง๐Ÿ‡ท 191.240.110.96
๐Ÿ‡ต๐Ÿ‡ฆ 181.178.170.48
๐Ÿ‡ธ๐Ÿ‡ช 176.74.199.185
๐Ÿ‡จ๐Ÿ‡ฆ 159.203.45.214
๐Ÿ‡บ๐Ÿ‡ธ 104.236.19.165
๐Ÿ‡ณ๐Ÿ‡ฑ 86.38.187.165