27.22.248.7
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
17 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇫🇷 Yougow |
Telnet brute force against a honeypot, IoT botnet pattern (1 login attempts, then shell commands). Automated detection.
|
Brute-Force IoT Targeted Hacking | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [GEO] (Telnet IoT Attack)
|
IoT Targeted Brute-Force | |
| 🇧🇾 StatsMe |
Date: 2026-10-26T18:02:10.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
|
Brute-Force SSH Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [23/tcp]
Source port: 33852
TTL: 50
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 45383
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 27.22.248.7) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36415 dst:23
|
Port Scan | |
| 🇵🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 60B | Win: 29040(1) | F2B/ufw-honeypot@2026-10-26T01:13:08Z
|
Port Scan Hacking | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇩🇪 RazorLabs.dev |
Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall.
|
Port Scan Brute-Force IoT Targeted | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 36688
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 27.22.248.7) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| 🇧🇾 stroytrest |
2026-10-25T04:57:53.826048+03:00 gate kernel: [1955763.715705] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=27.22.248.7 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=48128 DF PROTO=TCP SPT=60669 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [23/tcp]
Source port: 44443
TTL: 49
Packet length: 60
TOS: 0x08
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown