JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.254.21.190

157.254.21.190 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202662
Domain Name	iana.org
Country	🇭🇰 Hong Kong
City	Tsuen Wan, Tsuen Wan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.254.21.190

Whois 157.254.21.190

IP Abuse Reports for 157.254.21.190:

This IP address has been reported a total of 16 times from 16 distinct sources. 157.254.21.190 was first reported on March 6th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 jay hung	2026-03-21 04:21:25 (3 months ago)	2026-03-21T04:21:21.034509+00:00 quarktech kernel: [145143.413449] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-03-21T04:21:21.034509+00:00 quarktech kernel: [145143.413449] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=157.254.21.190 DST=172.237.29.33 LEN=40 TOS=0x00 PREC=0x40 TTL=238 ID=52584 PROTO=TCP SPT=46817 DPT=5003 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇪🇸 camp0	2026-03-19 03:25:32 (3 months ago)	SSH Abuse	Brute-Force SSH
🇩🇪 bescared	2026-03-18 21:19:37 (3 months ago)	F2B - Malicious activity detected. Excessive port scans.	Port Scan
🇩🇪 london2038.com	2026-03-18 21:19:17 (3 months ago)	Connection atttempts against closed TCP ports Mar 18 22:16:53 BLOCK SRC=157.254.21.190 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Mar 18 22:16:53 BLOCK SRC=157.254.21.190 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49118 PROTO=TCP SPT=48539 DPT=5000 WINDOW=1024 RES=0x00 SYN Mar 18 22:18:05 BLOCK SRC=157.254.21.190 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=40410 PROTO=TCP SPT=48539 DPT=5002 WINDOW=1024 RES=0x00 SYN Mar 18 22:19:17 BLOCK SRC=157.254.21.190 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=10752 PROTO=TCP SPT=48539 DPT=5003 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇦🇹 centurion	2026-03-18 21:15:55 (3 months ago)	Unauthorized attempt on kali [5003/tcp] Source port: 48539 TTL: 241 Packet length: 40 TOS: 0x00 http ... show more Unauthorized attempt on kali [5003/tcp] Source port: 48539 TTL: 241 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-17 21:31:47 (3 months ago)	Mar 17 17:28:18 localhost kernel: [102128366.032905] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Mar 17 17:28:18 localhost kernel: [102128366.032905] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=157.254.21.190 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=39614 PROTO=TCP SPT=42878 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 Mar 17 17:28:18 localhost kernel: [102128366.032914] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=157.254.21.190 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=39614 PROTO=TCP SPT=42878 DPT=5000 SEQ=3339970888 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Mar 17 17:31:46 localhost kernel: [102128574.438990] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=157.254.21.190 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=48750 PROTO=TCP SPT=42878 DPT=5001 SEQ=3541028249 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇺 PetePK	2026-03-17 05:59:02 (3 months ago)	Probed 4 time(s): TCP/5002, TCP/5003, TCP/5001, TCP/5000	Port Scan
🇹🇷 Threat.live	2026-03-14 12:50:31 (3 months ago)	Suspicious activity, tcp/5002, tcp/5001	Port Scan
🇬🇧 ISPLtd	2026-03-13 16:52:01 (3 months ago)	Mar 13 13:48:27 157.254.21.190 TCP SPT=40435 DPT=5002 SYN Mar 13 13:48:40 157.254.21.190 TCP SPT=404 ... show more Mar 13 13:48:27 157.254.21.190 TCP SPT=40435 DPT=5002 SYN Mar 13 13:48:40 157.254.21.190 TCP SPT=40435 DPT=5001 SYN Mar 13 13:52:00 157.254.21.190 TCP SPT=40435 DPT=5003 ... show less	Port Scan
Anonymous	2026-03-13 04:49:05 (3 months ago)	PROTO=TCP DPT=5000	Port Scan Hacking
🇨🇭 SOC [GOLINE SA]	2026-03-12 18:53:00 (3 months ago)	RoutePulse CyberSecurity detection: port scan horizontal. Severity: warning. Port: 5001. Distinct ta ... show more RoutePulse CyberSecurity detection: port scan horizontal. Severity: warning. Port: 5001. Distinct targets: 247. Flow count: 247. Target subnets: 185.54.83.0/24, 185.54.81.0/24, 185.54.82.0/24, 185.54.80.0/24 show less	Port Scan
🇺🇸 LotPhantom	2026-03-09 22:03:19 (3 months ago)	2026-03-09T22:01:41.167081+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-03-09T22:01:41.167081+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=157.254.21.190 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=46545 PROTO=TCP SPT=53563 DPT=5001 WINDOW=1024 RES=0x00 SYN URGP=0 2026-03-09T22:03:19.486557+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=157.254.21.190 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=37313 PROTO=TCP SPT=53563 DPT=5002 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-03-09 08:02:37 (3 months ago)	[08:02] Port scanning. Port(s) scanned: TCP/5000	Port Scan
🇫🇷 oonux.net	2026-03-07 08:35:45 (3 months ago)	RouterOS: Scanning detected TCP 157.254.21.190:52455 > x.x.x.x:5000	Port Scan
🇫🇷 Tanados	2026-03-07 03:44:35 (3 months ago)	Blocked by UFW [5002/tcp] Source port: 54915 TTL: 235 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [5002/tcp] Source port: 54915 TTL: 235 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.163.107.241

🇧🇷 177.30.64.65

🇺🇸 98.93.211.163

🇧🇷 15.229.25.59

🇧🇬 193.24.211.107

🇮🇹 185.15.171.137

🇺🇸 158.94.187.182

🇧🇩 103.179.198.19

🇳🇱 46.8.68.144

🇺🇸 45.130.83.174

🇺🇸 172.253.1.28

🇻🇳 117.2.123.19

🇺🇸 107.172.78.18

🇩🇪 85.215.252.72

🇺🇸 74.114.28.222

🇮🇹 72.146.44.117

🇺🇸 66.132.195.62

🇸🇪 20.240.51.74

🇺🇸 20.83.165.140

🇷🇴 151.242.30.40