94.239.2.2

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
51% Elevated
36 reports
25 reporters · latest 1 day ago
ISP
Bouygues Telecom SA
Usage Type
Fixed Line ISP
ASN
AS5410
Domain Name
bouyguestelecom.fr
Country
🇫🇷 France
City
Vitry-sur-Seine, Ile-de-France
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
36 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 3 🇺🇸 United States of America 3
Most common categories Port Scan 11 Hacking 5 Brute-Force 5 SSH 5 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇧🇬 Ilcheff
SSH tarpit hit (endlessh): connection from 94.239.2.2 [FR/France, AS5410] to the SSH port accepted and held open.
Port Scan Brute-Force SSH
🇺🇸 RAP
2026-10-30 20:17:21 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:44796 dst:23
Port Scan
🇵🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-10-19T21:20:04Z
Port Scan Hacking
🇫🇷 masterguru
(modsec_5040) ModSec 5040: API Basic Auth blocked from 94.239.2.2 (FR/France/-): 1 in the last 3600 secs (0-195)
Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
1791532538 - 10/09/2026 09:55:38 Host: 94.239.2.2/94.239.2.2 Port: 23 TCP Blocked ...
Port Scan
Anonymous
🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Web App Attack
🇪🇸 elcruzado.es
(wordpress) Failed wordpress login from 94.239.2.2 (FR/France/-)
Brute-Force
🇺🇸 HamSammich
Automated sensor: 3 SSH, telnet connection/probe attempts over the last 24h (latest 2026-10-03T17:58Z).
Brute-Force SSH IoT Targeted
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
Port Scan
🇩🇪 von44bis33
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
Brute-Force SSH
Anonymous
denied traffic to a honeypot network. destination port 22.
Port Scan Hacking
🇳🇱 i-turnradio.nl
2026-09-26 04:45:28 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 23.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 159.65.108.167
🇲🇾 115.135.224.228
🇷🇺 89.249.248.185
🇧🇪 34.77.153.177
🇧🇪 34.62.82.207
🇸🇬 206.189.152.195
🇺🇦 159.224.64.194
🇺🇸 158.94.187.46
🇷🇴 193.32.162.160
🇧🇷 186.233.177.71
🇧🇷 177.39.159.230
🇵🇱 172.69.155.184
🇦🇺 170.64.159.227
🇺🇸 158.94.187.242
🇺🇸 158.94.187.35
🇮🇹 83.224.157.121
🇺🇸 70.183.233.110
🇺🇸 40.119.43.103
🇻🇳 203.205.37.233
🇺🇸 193.202.8.11
feedback