Report for IP: 2.27.5.67

Threat LevelMEDIUM45/1001 rule type
4 incidents on record Ā· last seen 15d ago
PTR N/A
Org / ASN Great Flower
Country šŸ‡µšŸ‡± Poland
City Warsaw, Mazovia
Timezone Europe/Warsaw

Attack Analysis

šŸ‡µšŸ‡± Poland Ā· Warsaw Ā· 202226 Ā· Great Flower
IDS: Database Port Scan
Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Reports (4)

Date Severity Description
16 Jul 2026 - 18:27 high IDS: Database port scan ā€” ET SCAN Suspicious inbound to mySQL port 3306
16 Jul 2026 - 15:46 high IDS: Database port scan ā€” ET SCAN Suspicious inbound to Oracle SQL port 1521
16 Jul 2026 - 15:40 high IDS: Database port scan ā€” ET SCAN Suspicious inbound to MSSQL port 1433
16 Jul 2026 - 03:49 high IDS: Database port scan ā€” ET SCAN Suspicious inbound to MSSQL port 1433
Part of EagleEye Intelligence