JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.154.36.9

165.154.36.9 was found in our database!

This IP was reported 1,586 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.154.36.9

Whois 165.154.36.9

IP Abuse Reports for 165.154.36.9:

This IP address has been reported a total of 1,586 times from 148 distinct sources. 165.154.36.9 was first reported on January 31st 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Wepted	2026-08-26 01:02:02 (8 hours ago)	Port scan detected by honeypot	Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-24 11:39:25 (1 day ago)	Honeypot hit: HTTP/1.1 request on 2634 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_ ... show more Honeypot hit: HTTP/1.1 request on 2634 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_3_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15 Accept-Encoding: gzip; 2634 [6] TCP show less	Web App Attack
🇺🇸 donarev419	2026-08-24 00:23:31 (2 days ago)	Connection to port 2622 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:2622 ... show more Connection to port 2622 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:2622 User-Agent: Mozilla/5.0 (Debian; Linux x86_64) AppleWebKi show less	Port Scan Hacking
🇩🇪 VentryShield	2026-08-23 06:05:23 (3 days ago)	p0t honeypot: unknown connection on port 8080/tcp, 207 bytes received from client	Port Scan
🇧🇷 diego	2026-08-23 04:13:49 (3 days ago)	[probe-44-49] 2026-08-23 03:58:22, Client: 165.154.36.9, Protocol: 6, Unauthorized activity to HTTP: ... show more [probe-44-49] 2026-08-23 03:58:22, Client: 165.154.36.9, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 sandra361	2026-08-22 05:39:02 (4 days ago)	Port scan detected: 19 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154 ... show more Port scan detected: 19 attempts across 1 port (4433). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=165.154.36.9 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=30984 DF PROTO=TCP SPT=38408 DPT=4433 WINDOW=64952 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇧🇷 diego	2026-08-22 03:43:49 (4 days ago)	[probe-44-49] 2026-08-22 03:27:16, Client: 165.154.36.9, Protocol: 6, Unauthorized activity to HTTP: ... show more [probe-44-49] 2026-08-22 03:27:16, Client: 165.154.36.9, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇺🇸 donarev419	2026-08-21 11:12:25 (4 days ago)	Connection to port 2530 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2530 ... show more Connection to port 2530 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2530 User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) Appl show less	Port Scan Hacking
🇺🇸 donarev419	2026-08-21 03:51:48 (5 days ago)	Connection to port 2518 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2518 ... show more Connection to port 2518 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2518 User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:33.0) Gecko/2 show less	Port Scan Hacking
🇺🇸 Mark--	2026-08-20 11:32:13 (5 days ago)	Unauthorized connection attempt detected port 8080	Hacking
🇺🇸 donarev419	2026-08-20 09:48:37 (5 days ago)	Connection to port 2503 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2503 ... show more Connection to port 2503 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:2503 User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit show less	Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-08-20 01:40:49 (6 days ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0 Accept-Encoding: gzip; 8181 [7] TCP show less	Web App Attack
🇫🇷 geeek	2026-08-20 01:05:59 (6 days ago)	Port scanning: 8080 TCP Blocked	Port Scan
🇬🇧 sandra361	2026-08-19 22:39:32 (6 days ago)	Port scan detected: 18 attempts across 1 port (8181). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=165 ... show more Port scan detected: 18 attempts across 1 port (8181). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=165.154.36.9 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=7029 DF PROTO=TCP SPT=33704 DPT=8181 WINDOW=64952 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇫🇷 EvoX	2026-08-19 12:27:22 (6 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4433 GET / User-Agent: Mozilla/5.0 (Windows NT ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4433 GET / User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Accept-Encoding: gzip; 4433 [6] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 1586 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4882:d000::e5

🇱🇹 213.176.26.22

🇭🇰 203.23.128.196

🇧🇷 186.249.22.80

🇳🇱 157.245.66.179

🇫🇷 141.11.21.167

🇨🇦 38.9.96.9

🇺🇸 34.182.76.63

🇨🇦 20.63.64.130

🇺🇸 20.38.3.247

🇱🇹 213.176.26.58

🇮🇩 182.3.37.173

🇺🇸 168.100.149.107

🇺🇸 162.216.150.29

🇺🇸 157.230.128.50

🇨🇦 104.129.128.214

🇭🇰 103.197.71.1

🇳🇱 91.92.40.171

🇬🇧 87.236.176.31

🇨🇦 85.217.149.63