217.165.57.136
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Emirates Telecommunications Corporation
- Usage Type
- Fixed Line ISP
- ASN
- AS5384
- Domain Name
- etisalat.ae
- Country
- ๐ฆ๐ช United Arab Emirates
- City
- Al Ain City, Abu Dhabi
Abuse Reports
Total reports
15 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ซ๐ท thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-10-04T15:42:09Z.
|
Port Scan | |
| ๐ฆ๐บ dyln |
Dyls honeypot brute-force: SMB (8 total hits)
|
Brute-Force | |
| Anonymous |
denied SMB access attempt. destination port 445.
|
Port Scan Hacking | |
| ๐ฉ๐ช mist x |
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
|
Port Scan Hacking | |
| ๐ฉ๐ช Luhte |
Unsolicited TCP connection from 217.165.57.136 to port 0 at 2026-09-15T11:24:40Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| ๐ฉ๐ช check-the-sum.fr |
Port Scanning
|
Port Scan | |
| ๐บ๐ธ drewf.ink |
[09:38] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
|
Hacking | |
| ๐ซ๐ท sthoyer.de |
|
Port Scan | |
| ๐ฆ๐บ dyln |
Dyls honeypot brute-force: SMB (4 total hits)
|
Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 445.
|
Port Scan Hacking | |
| ๐บ๐ธ drewf.ink |
[15:32] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
|
Hacking Exploited Host | |
| ๐ซ๐ท vtchost.com |
|
Port Scan | |
| ๐ซ๐ท geeek |
Port scanning: 445 TCP Blocked
|
Port Scan | |
| ๐ฉ๐ช Admins@FBN |
FW-PortScan: Traffic Blocked srcport=54400 dstport=445
|
Port Scan | |
| ๐ฉ๐ช crnpekgoz |
[PortScan] Risk=100 ASN=5384 (portscan) Port=445 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown