This IP address has been reported a total of
18
times from
15 distinct
sources.
27.22.99.239 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 5
reports;
Belarus
with 3
reports;
Germany
with 3
reports.
The most common categories in these recent reports were:
Port Scan
17
times;
Brute-Force
3
times;
IoT Targeted
2
times;
Hacking
1
time;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running n ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-10-25T22:22:55Z.
show less
Unauthorized connection attempts consistent with that of port probing and scanning from 27.22.99.239 ...
show moreUnauthorized connection attempts consistent with that of port probing and scanning from 27.22.99.239 were detected at 2026-10-25 04:28:23 UTC. Learn More: https://fia.project-furina.com/report/4304
show less
Port Scan
Anonymous
2026-10-25T02:42:58.980649+02:00 vps kernel: [9259743.216751] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-25T02:42:58.980649+02:00 vps kernel: [9259743.216751] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=27.22.99.239 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=20627 DF PROTO=TCP SPT=47412 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
show less
Telnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. ...
show moreTelnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. | Port: 23 | Proto: TCP | AS: AS4134 Chinanet | Location: China
show less
Fail2Ban report from custom-honeypot; service=Telnet; application_protocol=Telnet; transport=TCP; de ...
show moreFail2Ban report from custom-honeypot; service=Telnet; application_protocol=Telnet; transport=TCP; destination_port=23; observed_at=2026-10-24T19:13:07Z; reported_at=2026-10-24T19:13:08Z
2026-10-24T19:13:07Z activity=connection accepted
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-24 20:14:29 | LAST=2026-10-24 20:14:30. Last seen 2026-10-24 20:14:30.
show less
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ...
show moreAutomated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
show less
