JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.219.103.53

154.219.103.53 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	vape
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401701
Domain Name	larus.net
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.219.103.53

Whois 154.219.103.53

IP Abuse Reports for 154.219.103.53:

This IP address has been reported a total of 47 times from 34 distinct sources. 154.219.103.53 was first reported on October 23rd 2026, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-10-23 15:48:25 (30 minutes ago)	Blocked by UFW (TCP on 80) Source port: 61271 TTL: 49 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 61271 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 154.219.103.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 Tsumugi Kotobuki	2026-10-23 14:59:44 (1 hour ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 51 \| Len: 44B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 51 \| Len: 44B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-23T14:59:44Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-10-23 14:49:01 (1 hour ago)	Blocked by UFW (TCP on 2375) Source port: 47075 TTL: 49 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 47075 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 154.219.103.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇿 delsio	2026-10-23 14:15:46 (2 hours ago)	AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=154.219.103.53 ... show more AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=154.219.103.53; destination=160.119.119.174; destination_port=23; score=110; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence feed=https://blocklist.net.ua/blocklist.csv,alert_name alert=Live Flow Malicious Fingerprint dst=160.119.119.174 port=23 show less	Port Scan Hacking
🇫🇷 Entalpi.net	2026-10-23 13:47:59 (2 hours ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇫🇷 ISPLtd	2026-10-23 13:39:09 (2 hours ago)	Oct 23 10:39:09 154.219.103.53 TCP SPT=49966 DPT=2222 SYN Oct 23 10:39:09 154.219.103.53 TCP SPT=499 ... show more Oct 23 10:39:09 154.219.103.53 TCP SPT=49966 DPT=2222 SYN Oct 23 10:39:09 154.219.103.53 TCP SPT=49966 DPT=2222 SYN ... show less	Port Scan SSH
🇩🇪 ValtonTahiri	2026-10-23 13:01:02 (3 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=154.219.103.53; proto=TCP; source_port=33575; target_port=2222 show less	Port Scan
🇺🇸 RAP	2026-10-23 12:07:34 (4 hours ago)	2026-10-23 12:07:34 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-10-23 12:05:18 (4 hours ago)	2026-10-23T14:05:17.541162+02:00 vps kernel: [9127883.189595] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-23T14:05:17.541162+02:00 vps kernel: [9127883.189595] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=154.219.103.53 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=46049 PROTO=TCP SPT=63124 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 xmission.com	2026-10-23 11:39:58 (4 hours ago)	Blocked by UFW (TCP on 23) Source port: 45813 TTL: 49 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 45813 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 154.219.103.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 EvoX	2026-10-23 11:19:38 (4 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP	SSH
🇳🇱 VMHeaven.io	2026-10-23 11:03:06 (5 hours ago)	Blocked by UFW [22/tcp] Source port: 33391 TTL: 47 Packet length: 40	Port Scan SSH Brute-Force
🇫🇷 zulzeen	2026-10-23 10:42:32 (5 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)	Hacking Web App Attack
🇩🇪 DasDuo	2026-10-23 10:01:29 (6 hours ago)	Attempt on port 2222 - potential remote access / brute-force attempt. Blocked by firewall (unsolicit ... show more Attempt on port 2222 - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan
🇺🇸 cwytech	2026-10-23 09:21:08 (6 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/web-asn-lockdown-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 61.149.183.194

🇩🇪 2a01:4f8:c015:aa76::1

🇫🇷 2001:41d0:33d:9200::405

🇧🇷 191.210.72.37

🇰🇷 175.207.246.3

🇳🇱 141.224.201.46

🇰🇷 118.37.214.187

🇧🇩 103.148.108.85

🇫🇷 85.217.140.26

🇺🇸 17.166.153.55

🇷🇴 2.57.122.150

🇫🇷 2001:41d0:33d:9200::401

🇹🇳 197.9.201.116

🇺🇸 162.216.149.90

🇵🇪 149.34.49.23

🇺🇸 147.185.132.126

🇺🇸 136.242.112.38

🇹🇼 111.70.49.179

🇮🇳 110.227.211.82

🇮🇩 103.191.14.210