94.79.7.120
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- JSC Comcor
- Usage Type
- Fixed Line ISP
- ASN
- AS8732
- Domain Name
- comcor.ru
- Country
- 🇷🇺 Russian Federation
- City
- Moscow, Moscow
Abuse Reports
Total reports
386 from
68 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 iamxorum |
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇷 EvoX |
|
Hacking | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-10-28T09:31:46Z.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇺🇸 drewf.ink |
[02:09] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
|
Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
|
Port Scan | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 94.79.7.120 to port 0 at 2026-10-05T09:48:57Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| Anonymous |
Unauthorized access (445/tcp/microsoft-ds)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown