202.170.53.248

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
47% Elevated
80 reports
33 reporters · latest 3 days ago
ISP
Universiti Sains Malaysia, Penang, Malaysia
Usage Type
University/College/School
ASN
AS24090
Domain Name
usm.my
Country
🇲🇾 Malaysia
City
Kota Bharu, Kelantan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
80 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 15 🇩🇪 Germany 6 🇦🇺 Australia 1
Most common categories Port Scan 22 Hacking 5 Brute-Force 4 DDoS Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 noi
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
Port Scan
🇫🇷 sthoyer.de
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇵🇱 nfsec.pl
Detected: TCP scan on port: 445 with flags: SYN
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇩🇪 jann
Honeypot: connection to unused port 445 at 2026-10-22 20:56:56 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇩🇪 Luhte
Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-10-21T03:54:08Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇩🇪 _ArminS_
SP-Scan 27620:445 detected 2026.10.18 20:14:27 blocked until 2026.12.07 12:17:14
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
Port Scan
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)
Hacking Brute-Force
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
🇩🇪 PepeHost.pl
Port scan: connection attempts to closed ports (fail2ban)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 134.33.64.215
🇺🇸 65.49.1.46
🇳🇱 64.205.72.2
🇸🇬 43.156.37.91
🇺🇸 172.236.96.75
🇻🇳 171.225.193.24
🇺🇸 162.216.149.52
🇮🇳 139.59.86.13
🇧🇪 34.140.194.215
🇷🇺 2.61.227.75
🇹🇭 202.29.241.53
🇧🇪 198.235.24.186
🇭🇺 195.228.79.114
🇺🇸 195.184.76.88
🇮🇳 103.87.175.110
🇳🇱 87.192.41.180
🇧🇪 35.210.52.199
🇺🇸 20.112.236.17
🇩🇪 185.168.29.92
🇹🇷 185.148.243.55
feedback