27.22.149.46
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
14 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:48425 dst:23
|
Port Scan | |
| 🇺🇸 onyxdev |
Honeypot (telnet): 1 login attempt, 545 shell commands, 12 malware download attempts.
|
Hacking Brute-Force IoT Targeted | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇩🇪 ValtonTahiri |
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
Oct 24 20:28:18 kernel: [1758187.538162] [UFW BLOCK] IN=ens160 OUT= SRC=27.22.149.46 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=48692 DF PROTO=TCP SPT=50307 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇧🇷 SOC Blue Team |
IPs get by Hunting on SIEM
|
Phishing Web Spam Port Scan Hacking | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 RAP |
2026-10-24 02:07:49 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇧🇷 aosafeshield |
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:57321 dst:23
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:60008 dst:23
|
Port Scan | |
| 🇺🇸 onyxdev |
Honeypot (telnet): 1 login attempt, 62 shell commands, 20 malware download attempts.
|
Hacking Brute-Force IoT Targeted | |
| 🇺🇸 OceanTreasure |
tcp/23; Legacy Telnet remote access probe @ 2026-10-21T18:20:30Z
|
IoT Targeted Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown