Showing current intelligence for this indicator.

IP Information for 165.154.172.108

Location Los Angeles, 🇺🇸 United States
ASN AS135377 — UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED, HK
BGP Prefix 165.154.172.0/24
Registry apnic
IP Address 165.154.172.108

IOC Matches

ID Type Tag Source Last seen Comments
11708 IP honeypot 4 2026-05-27 17:15:27
  • 2026-05-27: Observed 6 times. Targeted ports: 8042. Country: United States. Reputation: known attacker.
  • 2026-05-18: Observed 33 times. Targeted ports: 11037. Country: United States.
  • 2026-05-16: Observed 71 times. Targeted ports: 10621. Country: United States. Reputation: known attacker.
  • 2026-05-15: Observed 1 times. Targeted ports: 10184. Country: Canada. Reputation: known attacker.
  • 2026-05-14: Observed 67 times. Targeted ports: 11519. Country: United States.
  • 2026-05-12: Observed 74 times. Targeted ports: 10460. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM SYN resend.
  • 2026-05-10: Observed 3 times. Targeted ports: 1433. Country: United States. Reputation: known attacker.
  • 2026-05-07: Observed 64 times. Targeted ports: 49501. Country: United States. Reputation: known attacker.
  • 2026-05-01: Observed 5 times. Targeted ports: 4431. Country: United States. Reputation: known attacker.
  • 2026-04-30: Observed 5 times. Targeted ports: 12448. Country: United States. Reputation: known attacker.
  • 2026-04-22: Observed 74 times. Targeted ports: 5678. Country: United States. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM ESTABLISHED SYN resend with different seq.
  • 2026-03-28: Observed 74 times. Targeted ports: 11315. Country: Canada. Reputation: known attacker.
  • 2026-03-21: Observed 34 times. Targeted ports: 1900. Country: Canada. Reputation: known attacker.
  • 2026-03-11: Observed 16 times. Targeted ports: 3128. Country: United States. Reputation: known attacker.
  • 2026-03-07: Observed 94 times. Targeted ports: 5001. Country: United States. Reputation: known attacker.

URLs on this IP

No URLs found for this IP.

Passive DNS

No pDNS records found for 165.154.172.108.

Search History

ID Source Last seen
65759 web 2026-06-15 19:40:16
58547 web 2026-05-17 02:37:00

Whois

No Whois record yet. The worker will fetch it when this IP is in the queue.