217.165.57.136

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
24% Elevated
15 reports
12 reporters ยท latest 3 weeks ago
ISP
Emirates Telecommunications Corporation
Usage Type
Fixed Line ISP
ASN
AS5384
Domain Name
etisalat.ae
Country
๐Ÿ‡ฆ๐Ÿ‡ช United Arab Emirates
City
Al Ain City, Abu Dhabi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡ฆ๐Ÿ‡บ Australia 1 ๐Ÿ‡ซ๐Ÿ‡ท France 1
Most common categories Port Scan 5 Hacking 4 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-10-04T15:42:09Z.
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: SMB (8 total hits)
Brute-Force
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช mist x
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Luhte
Unsolicited TCP connection from 217.165.57.136 to port 0 at 2026-09-15T11:24:40Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช check-the-sum.fr
Port Scanning
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[09:38] Triggered SMB honeypot. Type: SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
Hacking
๐Ÿ‡ซ๐Ÿ‡ท sthoyer.de
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: SMB (4 total hits)
Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 445.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[15:32] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
Hacking Exploited Host
๐Ÿ‡ซ๐Ÿ‡ท vtchost.com
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท geeek
Port scanning: 445 TCP Blocked
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=54400 dstport=445
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช crnpekgoz
[PortScan] Risk=100 ASN=5384 (portscan) Port=445 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡น๐Ÿ‡ท 188.132.222.156
๐Ÿ‡ฐ๐Ÿ‡ท 199.241.120.131
๐Ÿ‡ง๐Ÿ‡ท 191.240.36.91
๐Ÿ‡ง๐Ÿ‡ท 187.46.84.177
๐Ÿ‡บ๐Ÿ‡ธ 185.88.100.239
๐Ÿ‡ฎ๐Ÿ‡ฑ 176.106.225.115
๐Ÿ‡บ๐Ÿ‡ธ 174.140.218.49
๐Ÿ‡ซ๐Ÿ‡ท 130.185.119.2
๐Ÿ‡น๐Ÿ‡ท 81.213.248.236
๐Ÿ‡ฎ๐Ÿ‡ท 81.91.153.13
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.2
๐Ÿ‡บ๐Ÿ‡ธ 66.132.195.16
๐Ÿ‡บ๐Ÿ‡ธ 66.132.159.93
๐Ÿ‡ฉ๐Ÿ‡ช 52.59.218.192
๐Ÿ‡น๐Ÿ‡ผ 36.225.147.157
๐Ÿ‡บ๐Ÿ‡ธ 34.106.101.165
๐Ÿ‡ฎ๐Ÿ‡ณ 223.189.210.241
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.217
๐Ÿ‡จ๐Ÿ‡ด 190.131.201.228
๐Ÿ‡ต๐Ÿ‡ช 190.119.63.98