JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.11.39.27

212.11.39.27 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	ZTNET Co., LTD
Usage Type	Fixed Line ISP
ASN	AS984
Domain Name	ows.us
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.11.39.27

Whois 212.11.39.27

IP Abuse Reports for 212.11.39.27:

This IP address has been reported a total of 112 times from 37 distinct sources. 212.11.39.27 was first reported on December 31st 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Da_tschek	2026-07-06 19:01:07 (6 days ago)	Port scanning	Port Scan Hacking
🇩🇪 iNetWorker	2026-07-06 17:03:25 (6 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 zupan	2026-07-06 16:57:00 (6 days ago)	Blocked by UFW on vps [3389/tcp] \| SPT: 51192 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [3389/tcp] \| SPT: 51192 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-06 16:47:25 (6 days ago)	Blocked by UFW on ns03 [3389/tcp] Source port: 51192 TTL: 239 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [3389/tcp] Source port: 51192 TTL: 239 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 celestialcity	2026-07-06 16:43:54 (6 days ago)	Blocked by UFW on celestialcityeu [3389/tcp] \| SPT: 51192 \| TTL: 247 \| LEN: 40 \| TOS: 0x08 • Reporte ... show more Blocked by UFW on celestialcityeu [3389/tcp] \| SPT: 51192 \| TTL: 247 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 sbajic	2026-07-06 16:38:19 (6 days ago)	...	Brute-Force
🇩🇪 IP Analyzer	2026-07-06 16:30:15 (6 days ago)	Unauthorized connection attempt from IP address 212.11.39.27 on Port 3389(RDP)	Port Scan
🇺🇸 micropedro	2026-07-06 16:26:34 (6 days ago)	3 incidents: port scanning. First: 2026-07-06 12:26, Last: 2026-07-06 12:26 UTC. Triggers: port-trap ... show more 3 incidents: port scanning. First: 2026-07-06 12:26, Last: 2026-07-06 12:26 UTC. Triggers: port-trap,non-public-port,firewall-tcp. show less	Port Scan
🇫🇷 Petre 21_ip	2026-07-06 16:24:52 (6 days ago)	2026-07-06T18:24:52.073846+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-06T18:24:52.073846+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=212.11.39.27 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=64005 PROTO=TCP SPT=51192 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 iamxorum	2026-07-06 16:24:11 (6 days ago)	2026-07-06T16:24:10.429859+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-07-06T16:24:10.429859+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=212.11.39.27 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=11001 PROTO=TCP SPT=51192 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Fahreddin Ergin	2026-07-06 16:03:09 (6 days ago)	Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)	Brute-Force SSH Port Scan
Anonymous	2026-07-06 15:58:41 (6 days ago)	Unauthorized connection to RDP port 3389	Port Scan
🇳🇱 VMHeaven.io	2026-07-06 15:57:02 (6 days ago)	Blocked by UFW [3389/tcp] Source port: 51192 TTL: 243 Packet length: 40	Port Scan Hacking Brute-Force
🇳🇱 ByeByte API	2026-07-06 15:56:47 (6 days ago)	byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-06T15:56:47Z. Source port 51192. TCP fl ... show more byebyte.space auth: TCP packet to port 3389 (RDP) at 2026-07-06T15:56:47Z. Source port 51192. TCP flags: SYN. Packet: 40B, TTL 243, window 1024, IP id 48640. Single packet, dropped at firewall. p0f: 12 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-07-06 15:56:47 (6 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 3389. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 3389. Single burst at 2026-07-06 15:56 UTC. show less	Port Scan

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.15

🇺🇸 185.150.190.130

🇮🇳 163.61.28.236

🇳🇱 185.242.226.104

🇹🇷 95.3.77.254

🇮🇩 69.5.23.222

🇺🇸 68.169.118.149

🇳🇱 45.198.224.18

🇮🇷 5.237.98.112

🇮🇳 159.65.148.158

🇫🇷 141.94.174.170

🇸🇬 104.250.53.219

🇺🇸 104.29.159.223

🇮🇳 103.212.138.229

🇺🇸 71.6.233.203

🇱🇹 62.60.130.219

🇩🇪 47.254.170.206

🇺🇸 2a04:c300:400::106

🇫🇷 185.177.72.70

🇵🇪 177.91.253.65