Is 47.91.28.253 malicious?
Checked against 1.5M+ indicators of compromise from honeypots, blocklists and OSINT feeds.
SUSPICIOUS
This indicator shows suspicious activity. Review related traffic.
Public Record
Type
ip
Country
JP
First Seen
15 Jun 2026
Status
ACTIVE
Source
T-Pot Honeypot
tannerp0ffatthoneypottpotsuricata
Full report is free — sign in to unlock
Confidence score, last-seen date, abuse reports, open CVEs (Shodan), attack context and API access.