79.37.200.20

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
25 reports
22 reporters · latest 10 hours ago
ISP
Telecom Italia S.p.A.
Usage Type
Fixed Line ISP
ASN
AS3269
Hostname(s)
host-79-37-200-20.retail.telecomitalia.it
Domain Name
telecomitalia.com
Country
🇮🇹 Italy
City
Cernusco sul Naviglio, Lombardy
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 5 🇮🇩 Indonesia 4 🇩🇪 Germany 3
Most common categories Hacking 12 Port Scan 10 Brute-Force 3 Exploited Host 2 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇺🇸 micropedro
3 incidents: port scanning. First: 2026-11-10 11:16, Last: 2026-11-12 19:44 UTC. Triggers: non-public-port,firewall-udp,unknown.
Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
Anonymous
9034/udp (1 or more attempts)
Port Scan
🇮🇹 Malwhunter
Suricata IDS (pfSense): ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) - 1 event(s) to UDP/9034 between 2026-11-12 04:03:05 and 04:03:05 (Europe/Rome)
Hacking
🇧🇷 diego
[rede-44-49] 11/11/2026-23:22:20.263014, 79.37.200.20, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 79.37.200.20
Hacking IoT Targeted
🇩🇪 iNetWorker
firewall-block, port(s): 9034/udp
Port Scan
🇹🇭 MWA SOC
Hacking
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇧🇷 diego
[rede-164-29] 11/11/2026-08:02:19.968317, 79.37.200.20, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇫🇮 dnsbd.tech
nftables: Port scan (UDP:9034) [srv2]
Port Scan Hacking
🇨🇭 SOC [GOLINE SA]
Exploited Host Hacking
🇭🇰 CyberFox
9034/udp (1 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.251.153.208
🇳🇱 204.76.203.221
🇳🇱 200.138.46.73
🇧🇷 177.7.30.146
🇫🇷 169.40.142.54
🇺🇸 162.216.149.246
🇭🇰 154.221.20.92
🇫🇮 147.185.133.204
🇻🇳 123.58.198.35
🇸🇬 104.28.156.138
🇮🇳 103.171.12.42
🇵🇷 72.50.2.161
🇵🇭 64.81.72.109
🇲🇾 59.153.151.174
🇺🇸 20.51.204.107
🇺🇸 16.98.117.190
🇷🇴 2.57.122.150
🇳🇱 204.76.203.212
🇺🇸 199.165.159.41
🇹🇼 198.235.24.125
feedback