Check an IP Address, Domain Name, Subnet, or ASN

80.253.29.10 was found in our database!

$ whois 80.253.29.10

country·🇷🇺 Russia

isp·LLC SETEL

asn·AS39153

network·Standard

$ sikker risk 80.253.29.10scoring →

confidence

88%Very High

first_seen·Jan 27, 2026

last_seen·1h ago

sessions·141

events·141

$ sikker protocols 80.253.29.10

SMB

141 / 141

$ sikker summary 80.253.29.10

80.253.29.10 has a threat confidence score of 88%. This IP address from Russia (AS39153, LLC SETEL) has been observed in 141 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on January 27, 2026, most recently active March 24, 2026.

$ sikker behaviors 80.253.29.10catalog →

highRemcom Remote Execution10x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 80.253.29.10

smb_empty_rpc_call10 smb_ipc_share_access10 smb_remcom_pipe_open10 smb_svcctl_pipe_open10

$ sikker related 80.253.29.10

🇷🇺·More threats fromRussia→AS·More threats fromLLC SETEL→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
80.253.31.232	100%	1,206
80.253.29.59	19%	13

IP Address	Confidence	Events
95.86.196.219	56%	1
5.142.168.202	64%	2
2.63.211.145	79%	20,396
83.149.7.138	50%	643
94.79.7.70	33%	151