70.127.21.199

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
72 reports
48 reporters · latest 2 hours ago
ISP
Charter Communications Inc
Usage Type
Fixed Line ISP
ASN
AS33363
Hostname(s)
syn-070-127-021-199.res.spectrum.com
Domain Name
charter.com
Country
🇺🇸 United States of America
City
Saint Cloud, Florida
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
72 from 48 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 26 🇫🇷 France 15 🇩🇪 Germany 6
Most common categories Port Scan 47 Brute-Force 30 Hacking 17 IoT Targeted 13 SSH 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-11-11T20:58:20Z.
Port Scan
🇰🇷 ian ian
Unsolicited TCP SYN to closed port(s) 23 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-11T17:27:17Z UTC, blocked by firewall.
Brute-Force Port Scan
🇦🇹 urnilxfgbez
Last 24 hours Brute Force Attacks
Brute-Force
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇩🇪 Kitki30.com
Entered Telnet Tarpit (endlessh, server 3). Log: 2026-11-10T19:07:46.760Z ACCEPT host=::ffff:70.127.21.199 port=60382 fd=62 n=537/1020
IoT Targeted Port Scan Brute-Force
🇺🇸 Axel
Atom Honypot: 137 connections to login:telnet (tcp/23), telnet (tcp/23) observed by 1 honeypot sensor between 2026-11-10 17:04 UTC and 2026-11-10 17:13 UTC. Includes 68 authentication attempts against decoy login services.
Port Scan Brute-Force
🇺🇸 MPL
tcp/23 (4 or more attempts)
Port Scan
🇧🇾 StatsMe
Date: 2026-11-10T02:06:30.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
Brute-Force SSH Port Scan
🇺🇸 johuang92
Cowrie SSH honeypot: session 602a37f2959b
SSH
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-11-09 07:23:59 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇸🇪 venix
Unauthorized connection attempt detected from IP address 70.127.21.199 to port 23 (compute01.malmo)
Brute-Force Exploited Host
🇺🇸 IndigoRidge
Knock-Knock TNET honeypot activity; time=2026-11-09 06:22:32; username=root
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.57
🇳🇱 195.178.110.232
🇬🇧 167.99.207.13
🇸🇬 148.66.155.73
🇳🇱 138.226.239.34
🇨🇳 124.77.144.38
🇳🇱 109.160.32.111
🇮🇱 93.175.59.180
🇺🇸 91.230.168.248
🇺🇸 66.132.172.123
🇬🇧 35.246.25.245
🇺🇸 34.203.30.49
🇺🇸 24.44.201.154
🇺🇸 216.218.206.68
🇹🇼 198.235.24.51
🇨🇳 180.76.228.149
🇳🇱 109.160.32.145
🇺🇸 104.248.125.220
🇮🇳 103.16.71.181
🇺🇸 35.245.131.123
feedback