5.238.252.202
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Telecommunication Company of Tehran
- Usage Type
- Fixed Line ISP
- ASN
- AS58224
- Domain Name
- tci.ir
- Country
- 🇮🇷 Iran (Islamic Republic of)
- City
- Tehran, Tehran
No reports in the last 60 days
5.238.252.202 has been reported 33 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
33 from
27 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/5.238.252.202
|
SSH | |
| 🇸🇪 Mailz1 |
Feb 6 01:08:31 smtp sshd[4136253]: Failed password for invalid user root from 5.238.252.202 port 48261 ssh2
...
|
Brute-Force SSH | |
| 🇺🇸 Floofie |
|
SSH | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=42225 dstport=22
|
Port Scan Hacking SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
|
Brute-Force SSH | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇨🇳 ThreatBook.io |
|
SSH | |
| 🇺🇸 SecondBanana |
2026-02-03T00:32:13.850468+00:00 thecount sshd[832904]: Connection closed by 5.238.252.202 port 37707 [preauth]
...
|
Brute-Force SSH | |
| 🇬🇧 PeravixGroup |
SSH brute-force attempt detected after 3 failed login attempts from HYEHOST infrastructure
|
Brute-Force SSH | |
| 🇩🇪 blackpanther |
|
Brute-Force SSH | |
| 🇹🇷 Threat.live |
Brute Force, tcp/22
|
Brute-Force | |
| 🇮🇹 sh97 |
IT01-SF: SSH Brute Force from 5.238.252.202 at 2026-01-31 13:04:14 IST
|
Brute-Force SSH | |
| 🇬🇧 wiredalter |
Blocked by fail2ban on cVPS [22/tcp]
Source Port: 42225
TTL: 32
Packet Length: 44
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown