JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.170.53.248

202.170.53.248 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 45%: ?

45%

ISP	Universiti Sains Malaysia, Penang, Malaysia
Usage Type	University/College/School
ASN	AS24090
Domain Name	usm.my
Country	🇲🇾 Malaysia
City	George Town, Penang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.170.53.248

Whois 202.170.53.248

IP Abuse Reports for 202.170.53.248:

This IP address has been reported a total of 46 times from 21 distinct sources. 202.170.53.248 was first reported on March 18th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 IP Analyzer	2026-07-26 06:30:09 (1 hour ago)	Unauthorized connection attempt from IP address 202.170.53.248 on Port 445(SMB)	Port Scan
🇵🇱 nfsec.pl	2026-07-22 18:50:14 (3 days ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
Anonymous	2026-07-21 15:38:28 (4 days ago)	1784648307 - 07/21/2026 17:38:27 Host: 202.170.53.248/202.170.53.248 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 thecocasio	2026-07-20 09:30:26 (5 days ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-20T09:30:26Z. show less	Port Scan
🇫🇷 sthoyer.de	2026-07-19 16:31:18 (6 days ago)	Jul 19 18:31:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 19 18:31:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=202.170.53.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=17666 DF PROTO=TCP SPT=54839 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 BIV	2026-07-08 01:11:16 (2 weeks ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇫🇷 Coco Bongo	2026-06-26 20:54:41 (4 weeks ago)	1782507280 - 06/26/2026 22:54:40 Host: 202.170.53.248/202.170.53.248 Port: 445 TCP Blocked ...	Port Scan
🇩🇪 Luhte	2026-06-20 06:01:15 (1 month ago)	Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-20T06:01:15Z. Source IP complete ... show more Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-20T06:01:15Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇫🇷 sthoyer.de	2026-06-17 07:23:56 (1 month ago)	Jun 17 09:23:55 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 17 09:23:55 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=202.170.53.248 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=420 DF PROTO=TCP SPT=2986 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Luhte	2026-06-06 20:57:14 (1 month ago)	Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-06T20:57:14Z. Source IP complete ... show more Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-06T20:57:14Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇫🇷 zulzeen	2026-06-06 04:02:42 (1 month ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
🇬🇧 Birdo	2026-06-04 12:03:52 (1 month ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇩🇪 Luhte	2026-06-01 01:30:50 (1 month ago)	Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-01T01:30:50Z. Source IP complete ... show more Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-06-01T01:30:50Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-05-31 19:35:16 (1 month ago)	Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-05-31T19:35:16Z. Source IP complete ... show more Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-05-31T19:35:16Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-05-27 17:06:48 (1 month ago)	Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-05-27T17:06:48Z. Source IP complete ... show more Unsolicited TCP connection from 202.170.53.248 to port 0 at 2026-05-27T17:06:48Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.109

🇫🇷 91.196.152.38

🇳🇱 45.148.10.152

🇺🇸 13.89.125.226

🇪🇸 196.196.150.100

🇩🇪 194.187.176.228

🇩🇪 194.187.176.156

🇩🇪 194.187.176.21

🇺🇦 193.106.56.100

🇺🇸 162.216.149.137

🇺🇸 147.185.132.184

🇷🇴 141.98.83.48

🇷🇺 109.197.54.138

🇺🇦 91.232.238.65

🇩🇪 87.251.87.83

🇩🇪 69.5.169.243

🇩🇪 69.5.169.183

🇩🇪 69.5.169.129

🇺🇸 64.62.156.192

🇳🇱 45.148.10.141