27.28.196.253
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
43 from
29 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 RAP |
2026-09-05 19:01:16 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
Blocked by UFW [23/tcp] | SPT: 59705 | TTL: 40 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 23/tcp
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=35449 dstport=23
|
Port Scan | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [GEO] (Telnet IoT Attack)
|
IoT Targeted Brute-Force | |
| 🇺🇸 RAP |
2026-09-05 08:46:07 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=39179 dstport=23
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:47872 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-05 00:43:50 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/23 (Telnet)
|
Port Scan | |
| 🇫🇷 Hiigara |
connection attempt : 27.28.196.253 on port : tcp/23 (Telnet)
|
Port Scan | |
| 🇦🇷 Bruno |
Port Scanner: 27.28.196.253
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown