85.26.235.185
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PJSC MegaFon
- Usage Type
- Mobile ISP
- ASN
- AS31133
- Domain Name
- megafon.ru
- Country
- 🇷🇺 Russian Federation
- City
- Samara, Samara Oblast
Abuse Reports
Total reports
59 from
34 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 noi |
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 445, 2026-11-12 07:15 - 07:15 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
|
Port Scan | |
| 🇺🇸 avgsmoe |
Connection to a honeypot port. Automated report (firemon).
|
Port Scan | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 108 | Len: 52B | Win: 8192(1) | F2B/ufw-honeypot@2026-11-10T01:09:34Z
|
Port Scan Hacking | |
| Anonymous |
Unauthorized access (445/tcp/microsoft-ds)
|
Port Scan | |
| 🇫🇷 EvoX |
|
Hacking | |
| 🇺🇸 drewf.ink |
[18:37] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
|
Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
|
Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
|
Exploited Host Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown