This IP address has been reported a total of
29
times from
27 distinct
sources.
171.22.27.66 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 22
reports;
Germany
with 5
reports;
Switzerland
with 1
report.
The most common categories in these recent reports were:
SSH
23
times;
Brute-Force
21
times;
Port Scan
5
times;
Hacking
3
times;
FTP Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 14/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 14/100 (info) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 5 (5 bad password, 0 invalid user) | 0 success | 10 total SSH log events | seen on 1 sensor(s)
Origin: Iran (IR) | AS60631 Pars Parva System LLC | 171.22.27.0/24
First seen: 2026-10-03 16:59:10 UTC | Last seen: 2026-10-03 21:06:58 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Brute-Force
SSH
Anonymous
2026-10-03T22:09:32.221471 localhost.localdomain sshd-session[2947539]: Failed password for root fro ...
show more2026-10-03T22:09:32.221471 localhost.localdomain sshd-session[2947539]: Failed password for root from 171.22.27.66 port 35116 ssh2
2026-10-03T22:09:33.688580 localhost.localdomain sshd-session[2947539]: Connection closed by authenticating user root 171.22.27.66 port 35116 [preauth]
...
show less
2026-10-03T20:40:25.681132+02:00 vmd177327 sshd-session[4067934]: Failed password for root from 171. ...
show more2026-10-03T20:40:25.681132+02:00 vmd177327 sshd-session[4067934]: Failed password for root from 171.22.27.66 port 52844 ssh2
2026-10-03T21:43:53.919660+02:00 vmd177327 sshd-session[4094174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.27.66 user=root
2026-10-03T21:43:55.835242+02:00 vmd177327 sshd-session[4094174]: Failed password for root from 171.22.27.66 port 42408 ssh2
...
show less
2026-10-03T18:15:10.817567+00:00 polaris2 sshd-session[2339345]: Failed password for root from 171.2 ...
show more2026-10-03T18:15:10.817567+00:00 polaris2 sshd-session[2339345]: Failed password for root from 171.22.27.66 port 40568 ssh2
2026-10-03T19:16:34.835337+00:00 polaris2 sshd-session[2367953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.27.66 user=root
2026-10-03T19:16:36.895336+00:00 polaris2 sshd-session[2367953]: Failed password for root from 171.22.27.66 port 36374 ssh2
...
show less
Brute-Force
SSH
Anonymous
Oct 3 19:02:05 conf sshd[78367]: Connection closed by authenticating user root 171.22.27.66 port 46 ...
show moreOct 3 19:02:05 conf sshd[78367]: Connection closed by authenticating user root 171.22.27.66 port 46132 [preauth]
Oct 3 20:03:11 conf sshd[89286]: Connection from 171.22.27.66 port 43842 on 79.137.33.6 port 22 rdomain ""
Oct 3 20:03:12 conf sshd[89286]: Connection closed by authenticating user root 171.22.27.66 port 43842 [preauth]
...
show less
2026-10-03T19:57:23.154711+02:00 vps575891 sshd[947895]: Failed password for root from 171.22.27.66 ...
show more2026-10-03T19:57:23.154711+02:00 vps575891 sshd[947895]: Failed password for root from 171.22.27.66 port 44428 ssh2
2026-10-03T20:58:45.480484+02:00 vps575891 sshd[950299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.27.66 user=root
2026-10-03T20:58:47.517044+02:00 vps575891 sshd[950299]: Failed password for root from 171.22.27.66 port 38224 ssh2
...
show less