148.227.97.20

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
27 reports
23 reporters · latest 6 days ago
ISP
Starlink Chile SpA
Usage Type
Fixed Line ISP
ASN
AS14593
Hostname(s)
customer.sntochl1.isp.starlink.com
Domain Name
starlink.com
Country
🇨🇱 Chile
City
Santiago, Santiago Metropolitan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇺🇸 United States of America 5 🇫🇷 France 2
Most common categories Port Scan 11 Brute-Force 7 Hacking 6 Web App Attack 4 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (61, Abuse: 53)
Hacking Exploited Host Web App Attack
🇺🇸 justbible
Bad Web Bot
🇩🇪 todix
"GET /wp-login.php HTTP/1.1" 403 619 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:31442 dst:23
Port Scan
Anonymous
unsolicited connect TCP dport 23 (sport 54099)
Hacking
🇺🇸 rjdefrancisco
Unwanted traffic detected by honeypot on October 14, 2026: port scans (1 port 23 scan).
Port Scan Brute-Force SSH
🇲🇹 Malta
148.227.97.20 - - [15/Oct/2026:07:56:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=50477 dstport=23
Port Scan
🇮🇳 Parth Maniar
This IP address carried out 2 port scanning attempts on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇸🇪 venix
Unauthorized connection attempt detected from IP address 148.227.97.20 to port 23 (compute01.malmo)
Brute-Force Exploited Host
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 46 | Len: 60B | Win: 65535(1) | rDNS: customer.sntochl1.isp.starlink.com | F2B/ufw-honeypot@2026-10-14T17:19:59Z
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 192.53.123.118
🇲🇽 187.134.55.112
🇰🇷 175.201.184.140
🇨🇳 123.233.236.214
🇨🇳 47.120.30.67
🇳🇱 45.148.10.151
🇬🇧 5.226.140.4
🇹🇷 5.25.181.2
🇨🇳 1.24.16.3
🇫🇷 213.32.24.214
🇬🇧 195.96.139.217
🇮🇩 182.253.129.79
🇨🇱 181.42.137.132
🇺🇦 176.36.200.74
🇵🇱 162.158.103.163
🇺🇸 138.91.105.185
🇺🇸 70.183.226.43
🇺🇸 70.169.12.235
🇺🇸 66.132.186.237
🇺🇸 66.132.159.26
feedback