154.89.156.212
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Fastmos Co Limited
- Usage Type
- Content Delivery Network
- ASN
- AS400619
- Domain Name
- fastmos.com
- Country
- 🇭🇰 Hong Kong
- City
- Central, Central and Western
No reports in the last 60 days
154.89.156.212 has been reported 57 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
57 from
38 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-06-19 18:43:09 UTC Unauthorized activity to TCP port 2323. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Brute-Force | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [52869/tcp]
Source port: 10604
TTL: 48
Packet length: 40
|
Port Scan | |
| 🇨🇭 pingusurmars |
Blocked by UFW on amperetwo [23/tcp]
Source port: 10860
TTL: 51
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted Brute-Force | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 23).
Source port: 10860
TTL: 49
Packet length: 40
TOS: 0x00
This report (for 154.89.156.212) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-06-19 10:26:22 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇱 soverin |
Network scan on port 23
|
Email Spam | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 52869. Activity window: 2026-06-18 20:38 UTC to 2026-06-19 07:03 UTC.
|
Port Scan | |
| 🇳🇱 ByeByte API |
byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-19T07:03:58Z. Source port 10604. TCP flags: SYN. Packet: 40B, TTL 48, window 61154, IP id 4120. Single packet, dropped at firewall. p0f: 16 hops.
|
Port Scan | |
| 🇺🇸 RAP |
2026-06-19 04:32:14 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇱 COMPLEX |
Unsolicited TCP traffic | Action: DROP | Port 52869
|
Brute-Force | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown