JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.202.54.221

196.202.54.221 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 51%: ?

51%

ISP	TE Data
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	tedata.net
Country	🇪🇬 Egypt
City	Alexandria, Alexandria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.202.54.221

Whois 196.202.54.221

IP Abuse Reports for 196.202.54.221:

This IP address has been reported a total of 181 times from 43 distinct sources. 196.202.54.221 was first reported on May 12th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-07-13 17:01:09 (1 day ago)	[17:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [17:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇫🇷 vtchost.com	2026-07-11 17:37:11 (3 days ago)	Jul 11 19:37:10 vtchost kernel: [123264.034488] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jul 11 19:37:10 vtchost kernel: [123264.034488] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=196.202.54.221 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=22748 DF PROTO=TCP SPT=57001 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 thecocasio	2026-07-07 14:52:17 (1 week ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-07T14:52:17Z. show less	Port Scan
🇺🇸 cwytech	2026-06-25 10:20:45 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇫🇷 Little Iguana	2026-06-24 18:44:19 (2 weeks ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-06-24 18:10:43 (2 weeks ago)	Jun 24 20:10:42 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 24 20:10:42 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=196.202.54.221 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=18446 DF PROTO=TCP SPT=49337 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-17 11:09:31 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 sthoyer.de	2026-06-17 09:24:14 (3 weeks ago)	Jun 17 11:24:12 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 17 11:24:12 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=196.202.54.221 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=29820 DF PROTO=TCP SPT=62513 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 Birdo	2026-06-16 19:18:41 (4 weeks ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇫🇷 sthoyer.de	2026-06-11 13:38:44 (1 month ago)	Jun 11 15:38:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 11 15:38:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=196.202.54.221 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=23274 DF PROTO=TCP SPT=63995 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-06-11 12:28:49 (1 month ago)	Jun 11 14:28:48 vtchost kernel: [44786.306096] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jun 11 14:28:48 vtchost kernel: [44786.306096] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=196.202.54.221 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=564 DF PROTO=TCP SPT=58657 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 sumnone	2026-06-07 16:56:23 (1 month ago)	Port probing on unauthorized port 445	Port Scan Hacking Exploited Host
🇩🇪 KPS	2026-06-07 12:00:57 (1 month ago)	PortscanM	Port Scan
🇫🇷 geeek	2026-06-05 14:58:40 (1 month ago)	Port scanning: 445 TCP Blocked	Port Scan
🇬🇧 PeravixGroup	2026-06-05 08:29:03 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:4e40:e020:0:735:d132:98f4:555a

🇨🇴 190.85.11.150

🇦🇷 186.123.212.173

🇸🇬 166.108.194.249

🇺🇸 162.216.150.177

🇱🇹 141.98.9.104

🇨🇦 85.217.149.68

🇱🇺 64.89.161.93

🇺🇸 47.251.243.208

🇳🇱 45.148.10.147

🇮🇳 27.58.72.243

🇺🇸 20.65.193.188

🇲🇾 14.1.188.93

🇺🇸 2a04:4e40:e040:0:735:d132:98f4:555a

🇩🇪 152.53.148.66

🇷🇴 80.94.92.120

🇨🇦 66.70.255.14

🇹🇼 45.43.37.254

🇺🇸 20.65.195.23

🇨🇳 223.86.148.242