JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.64.224

165.154.64.224 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.64.224

Whois 165.154.64.224

IP Abuse Reports for 165.154.64.224:

This IP address has been reported a total of 30 times from 28 distinct sources. 165.154.64.224 was first reported on September 3rd 2026, and the most recent report was 49 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-03 07:13:25 (49 seconds ago)	Blocked by UFW (TCP on 23) Source port: 50686 TTL: 44 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 50686 TTL: 44 Packet length: 40 TOS: 0x08 This report (for 165.154.64.224) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇳🇱 nlstx	2026-09-03 07:06:32 (7 minutes ago)	2026-09-03 09:06:32,536 fail2ban.actions [930]: NOTICE [sshd] Ban 165.154.64.224 ...	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-03 07:05:49 (8 minutes ago)	(mod_security) mod_security (id:218420) triggered by 165.154.64.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218420) triggered by 165.154.64.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 03:05:31.869309 2026] [security2:error] [pid 6688:tid 6688] [client 165.154.64.224:63478] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.233:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.233"] [uri "/hello.world"] [unique_id "apkcO5DYrCU9ox5Jh_ppsQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 marcel-knorr.de	2026-09-03 07:05:10 (9 minutes ago)	[headscale] SSH login failed	Brute-Force SSH
🇪🇸 el-brujo	2026-09-03 07:02:29 (11 minutes ago)	2026-09-03T09:01:57.004957 ns2.elhacker.net proftpd[491014]: session[491014] 0.0.0.0 (165.154.64.224 ... show more 2026-09-03T09:01:57.004957 ns2.elhacker.net proftpd[491014]: session[491014] 0.0.0.0 (165.154.64.224[165.154.64.224]): USER admin: no such user found from 165.154.64.224 [165.154.64.224] to ::ffff:192.168.0.3:2222 2026-09-03T09:02:28.422557 ns2.elhacker.net proftpd[491666]: session[491666] 0.0.0.0 (165.154.64.224[165.154.64.224]): USER user: no such user found from 165.154.64.224 [165.154.64.224] to ::ffff:192.168.0.3:2222 ... show less	FTP Brute-Force
🇳🇱 Savvii	2026-09-03 06:59:59 (14 minutes ago)	20 attempts against mh-ssh on pf102960	Brute-Force SSH
🇵🇱 webadmin	2026-09-03 06:59:10 (15 minutes ago)	Failed password for user from 165.154.64.224 port 31322 ssh2 Failed password for root from 165.154.6 ... show more Failed password for user from 165.154.64.224 port 31322 ssh2 Failed password for root from 165.154.64.224 port 57468 ssh2 show less	SSH
🇩🇪 Teufel100	2026-09-03 06:58:23 (15 minutes ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
Anonymous	2026-09-03 06:53:44 (20 minutes ago)	Apache HTTP Server Directory Traversal.	Web App Attack
🇳🇱 EGP Abuse Dept	2026-09-03 06:51:08 (23 minutes ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2026-09-03 06:45:03 (29 minutes ago)	Phishing and smtprelay and use of leaked account data	Hacking
🇺🇸 ezscale	2026-09-03 06:44:54 (29 minutes ago)	SSH brute force on support (3 failures). Detected by fail2ban.	Brute-Force SSH
🇩🇪 MBombeck	2026-09-03 06:41:28 (32 minutes ago)	Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures	Web App Attack
🇧🇩 sakibmas	2026-09-03 06:40:22 (33 minutes ago)	2026-09-03T12:40:20.196006+06:00 passbolt sshd[572907]: pam_unix(sshd:auth): authentication failure; ... show more 2026-09-03T12:40:20.196006+06:00 passbolt sshd[572907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.64.224 2026-09-03T12:40:22.137512+06:00 passbolt sshd[572907]: Failed password for invalid user admin from 165.154.64.224 port 53084 ssh2 ... show less	Brute-Force SSH
🇺🇸 arc21	2026-09-03 06:38:10 (36 minutes ago)	2026-09-03T07:34:30.180338+01:00 NYC-MC-2 sshd-session[3313111]: Invalid user admin from 165.154.64. ... show more 2026-09-03T07:34:30.180338+01:00 NYC-MC-2 sshd-session[3313111]: Invalid user admin from 165.154.64.224 port 61940 2026-09-03T07:35:01.563127+01:00 NYC-MC-2 sshd-session[3327293]: Invalid user user from 165.154.64.224 port 20718 2026-09-03T07:36:04.572931+01:00 NYC-MC-2 sshd-session[3355555]: Invalid user user from 165.154.64.224 port 35996 2026-09-03T07:37:39.092269+01:00 NYC-MC-2 sshd-session[3398390]: Invalid user orangepi from 165.154.64.224 port 20240 2026-09-03T07:38:10.535053+01:00 NYC-MC-2 sshd-session[3414004]: Invalid user support from 165.154.64.224 port 46942 ... show less	Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.102

🇺🇸 205.210.31.97

🇬🇧 194.50.235.143

🇧🇷 187.16.96.250

🇱🇻 185.22.173.26

🇺🇸 162.216.149.65

🇺🇸 147.185.132.219

🇨🇳 117.63.189.10

🇺🇸 67.225.142.170

🇳🇱 45.148.10.151

🇬🇧 35.203.210.77

🇺🇸 34.207.86.197

🇭🇷 193.198.175.228

🇺🇸 147.182.136.128

🇺🇸 136.108.15.119

🇺🇸 91.230.168.237

🇺🇸 74.207.237.5

🇱🇻 62.60.130.242

🇧🇷 205.210.31.253

🇺🇸 195.184.76.22