80.67.213.238
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Norilsk-Telecom JSC Network
- Usage Type
- Fixed Line ISP
- ASN
- AS33871
- Domain Name
- sibset-team.ru
- Country
- 🇷🇺 Russian Federation
- City
- Norilsk, Krasnoyarsk Krai
Abuse Reports
Total reports
723 from
121 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
|
Port Scan | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 445, 2026-11-13 16:10 - 16:10 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: SMB (28 total hits)
|
Brute-Force | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| Anonymous |
Unauthorized access (445/tcp/microsoft-ds)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇩🇪 jann |
Honeypot: connection to unused port 445 at 2026-11-11 02:45:39 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 80.67.213.238 to port 0 at 2026-11-10T21:58:09Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown