5.238.220.12
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Telecommunication Company of Tehran
- Usage Type
- Fixed Line ISP
- ASN
- AS58224
- Domain Name
- tci.ir
- Country
- 🇮🇷 Iran (Islamic Republic of)
- City
- Tehran, Tehran
Abuse Reports
Total reports
25 from
19 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Luhte |
Unsolicited TCP connection from 5.238.220.12 to port 0 at 2026-10-28T06:40:14Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇩🇪 PepeHost.pl |
Port scan: connection attempts to closed ports (fail2ban)
|
Port Scan | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇫🇷 Little Iguana |
trying to access non-authorized port
|
Port Scan | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=4; port 445 proto 6 detection honeypot_tcp; port 445 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: SMB (4 total hits)
|
Brute-Force | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 5.238.220.12 to port 445 (ger-02) [SMB]
|
Exploited Host | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
|
Port Scan | |
| 🇦🇹 joe-abuse |
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (445/tcp); first 2026-10-25 08:59:02 UTC, last 2026-10-25 08:59:02 UTC. Reported by ipdb-security/fitzgerald.eu
|
Port Scan | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 445 with flags: SYN
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 45 hits on ports [445] (automated)
|
Port Scan Hacking | |
| 🇳🇱 i-turnradio.nl |
2026-10-26 06:19:32 +01:00 - Unsolicited TCP connection to a honeypot port; probing port 445.
|
Port Scan | |
| 🇦🇹 joe-abuse |
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (445/tcp); first 2026-10-25 08:59:02 UTC, last 2026-10-25 08:59:02 UTC. Reported by ipdb-security/fitzgerald.eu
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown