165.154.62.147

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
64% Elevated
374 reports
23 reporters · latest 13 hours ago
ISP
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS135377
Domain Name
ucloud.cn
Country
🇭🇰 Hong Kong
City
Hong Kong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
374 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 147 🇨🇳 China 10 🇺🇸 United States of America 3
Most common categories Port Scan 155 Web App Attack 6 Hacking 3 Brute-Force 3 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇰 sandra361
Port scan detected: 33 packets across 1 port (8004). | Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.62.147 LEN=217 TOS=0x14 PREC=0x00 TTL=45 ID=15781 DF PROTO=TCP SPT=59322 DPT=8004 WINDOW=64952 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
21/tcp (1 or more attempts)
Port Scan
🇭🇰 PingMeMaybe
Blocked by UFW on hk [5614/tcp] Source port: 42048 TTL: 47 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇭🇰 鹏鹏
monitor: on ser162528253480 | port: 5005 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇭🇰 鹏鹏
monitor: on ser162528253480 | port: 12108 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
3024/tcp (1 or more attempts)
Port Scan
Anonymous
65531/tcp (1 or more attempts)
Port Scan
🇭🇰 sandra361
Port scan detected: 47 attempts across 1 port (2191). | Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.62.147 LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=19291 DF PROTO=TCP SPT=50206 DPT=2191 WINDOW=64952 RES=0x00 ACK FIN URGP=0
Port Scan
Anonymous
1248/tcp (1 or more attempts)
Port Scan
🇨🇳 yiyan
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-04T05:09:14.677Z ACCEPT host=165.154.62.147 port=32944 fd=4 n=1/8192
Brute-Force SSH
🇭🇰 sandra361
Port scan detected: 5 attempts across 1 port (3401). | Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.62.147 LEN=40 TOS=0x14 PREC=0x00 TTL=46 ID=32866 DF PROTO=TCP SPT=33456 DPT=3401 WINDOW=64952 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 30 attempts across 1 port (10174). | Evidence: REAPER_TARPIT: IN=eth0 SRC=165.154.62.147 LEN=283 TOS=0x14 PREC=0x00 TTL=45 ID=4527 DF PROTO=TCP SPT=54162 DPT=10174 WINDOW=64952 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
7063/tcp (1 or more attempts)
Port Scan
Anonymous
18056/tcp (1 or more attempts)
Port Scan
🇭🇰 PingMeMaybe
Blocked by UFW on hk [1080/tcp] Source port: 37436 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.73.27.116
🇺🇸 198.199.87.157
🇨🇳 117.93.4.255
🇳🇱 109.160.32.109
🇮🇳 59.179.31.238
🇺🇸 20.169.50.187
🇯🇵 8.211.168.73
🇰🇿 5.251.27.182
🇳🇱 193.47.62.69
🇺🇸 191.101.241.242
🇺🇸 162.216.150.57
🇮🇳 45.115.186.21
🇬🇧 35.203.211.43
🇺🇸 24.199.82.189
🇨🇦 24.54.91.140
🇸🇬 20.157.117.15
🇲🇽 206.135.80.194
🇺🇦 194.39.227.127
🇰🇷 175.206.113.91
🇦🇺 130.162.192.208
feedback