165.154.66.153

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
89% Critical
18 reports
17 reporters · latest 1 day ago
ISP
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135377
Domain Name
ucloud.cn
Country
🇭🇰 Hong Kong
City
Hong Kong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇺🇸 United States of America 4 🇨🇿 Czechia 2
Most common categories Port Scan 10 SSH 9 Brute-Force 8 Hacking 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 m2jest1c
Nov 14 02:10:47 instance1 sshd[3741990]: Invalid user NL5xUDpV2xRa from 165.154.66.153 port 52020 ...
Brute-Force SSH
🇨🇿 lp
SSH Brute force: 1 attempts were recorded from 165.154.66.153 2026-11-13T23:30:01+0100 Invalid user NL5xUDpV2xRa from 165.154.66.153
Brute-Force SSH
🇹🇷 Mucahit
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (8 events in 5min) at 2026-11-13 16:55
Hacking
🇫🇷 adnscom.com
IPS trigger: Brute force ssh authentication attack
Brute-Force
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Events: 1 | F2B/ssh-honeypot-scan@2026-11-13T10:33:05Z
Port Scan Hacking
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (7 events in 5min) at 2026-11-13 02:48
Hacking
🇨🇴 juan_mesa
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
Port Scan SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇨🇿 lp
SSH Brute force: 1 attempts were recorded from 165.154.66.153 2026-11-12T18:11:24+0100 Invalid user NL5xUDpV2xRa from 165.154.66.153
Brute-Force SSH
🇩🇪 Kitki30.com
Entered SSH Tarpit (endlessh, server 3). Log: 2026-11-12T15:08:27.656Z ACCEPT host=::ffff:165.154.66.153 port=19442 fd=5 n=2/4096
Brute-Force SSH Port Scan
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 22 - dr
Port Scan Hacking
🇺🇸 MPL
tcp ports: 2222,22 (8 or more attempts)
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 jkhorvath
Missing identification String for SSH from 165.154.66.153
Brute-Force SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.188.173.16
🇺🇸 192.241.148.41
🇩🇪 167.94.145.21
🇺🇸 143.244.146.56
🇨🇳 111.53.86.228
🇺🇸 104.152.52.211
🇬🇧 78.153.140.236
🇺🇸 72.24.210.245
🇺🇸 50.212.27.150
🇳🇱 204.76.203.40
🇺🇸 172.121.75.221
🇺🇸 161.35.96.60
🇹🇳 154.111.147.186
🇸🇬 152.42.245.112
🇨🇳 124.223.219.105
🇺🇸 104.152.52.147
🇺🇸 104.152.52.134
🇺🇸 73.250.186.240
🇺🇸 20.102.98.53
🇨🇳 223.15.228.240
feedback