27.19.56.164
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
No reports in the last 60 days
27.19.56.164 has been reported 51 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
51 from
30 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 mibbsdevs |
Honeypot Trap: Port scanning or connection attempt (Ports 21/22/23/3306/3389/5432).
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-21 12:44:35 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇦🇷 Bruno |
Port Scanner: 27.19.56.164
|
Port Scan | |
| Anonymous |
Port scanning: unsolicited connection probes to closed ports. Detected and blocked automatically.
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-21 02:04:16 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-08-20 12:00:30 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:49499 dst:23
|
Port Scan | |
| 🇺🇸 COMPLEX |
Unsolicited TCP traffic | Action: DROP | Port 23
|
Brute-Force | |
| 🇧🇾 sashan |
2026-08-19T23:40:24.400418+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=27.19.56.164 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=28312 DF PROTO=TCP SPT=41068 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-19 16:26:56 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot.
Source IP: 27.19.56.164
Targeted device: NAS
First seen: 19 Aug 2026 15:38:54 UTC
Last seen: 19 Aug 2026 15:38:54 UTC
Attempts: 1
Sample credentials: admin:admin
|
Brute-Force IoT Targeted | |
| 🇺🇸 RAP |
2026-08-19 13:05:44 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown