JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.27.149.248

120.27.149.248 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 59%: ?

59%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.27.149.248

Whois 120.27.149.248

IP Abuse Reports for 120.27.149.248:

This IP address has been reported a total of 169 times from 57 distinct sources. 120.27.149.248 was first reported on March 2nd 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 baltic-lab.com	2026-06-04 15:05:10 (13 hours ago)	Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇫🇷 Petre 21_ip	2026-06-01 02:57:14 (4 days ago)	2026-06-01T04:57:14.091466+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-01T04:57:14.091466+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=120.27.149.248 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=231 ID=44901 PROTO=TCP SPT=42632 DPT=3478 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-30 09:26:00 (5 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 kingjan1999	2026-05-26 17:05:22 (1 week ago)	Blocked by UFW [628/tcp] \| SPT: 55113 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [628/tcp] \| SPT: 55113 \| TTL: 238 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-05-25 03:38:24 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 31342 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 31342 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-05-24 11:10:06 (1 week ago)	monitor: on ser162528253480 \| port: 22215 \| ttl: 237 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 22215 \| ttl: 237 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 08:14:46 (1 week ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 DAUGDE	2026-05-21 19:35:01 (2 weeks ago)	2026-05-21T21:34:55.122221+02:00 v2202104133598150667 9275893e7080[126433]: May 21 21:34:55 9275893e ... show more 2026-05-21T21:34:55.122221+02:00 v2202104133598150667 9275893e7080[126433]: May 21 21:34:55 9275893e7080 postfix/smtps/smtpd[7105]: lost connection after CONNECT from unknown[120.27.149.248] 2026-05-21T21:35:00.108569+02:00 v2202104133598150667 9275893e7080[126433]: May 21 21:35:00 9275893e7080 postfix/submission/smtpd[7113]: lost connection after CONNECT from unknown[120.27.149.248] 2026-05-21T21:35:00.361933+02:00 v2202104133598150667 9275893e7080[126433]: May 21 21:35:00 9275893e7080 postfix/submission/smtpd[7113]: improper command pipelining after CONNECT from unknown[120.27.149.248]: EHLO\r\n ... show less	Email Spam Spoofing Brute-Force
🇭🇰 PingMeMaybe	2026-05-18 19:57:58 (2 weeks ago)	Blocked by UFW on hk [12627/tcp] Source port: 54220 TTL: 236 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on hk [12627/tcp] Source port: 54220 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-05-18 15:31:25 (2 weeks ago)	monitor: on ser162528253480 \| port: 35942 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 35942 \| ttl: 236 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-17 23:35:56 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/120.27.149.248 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/120.27.149.248 2026-05-17 03:26:48 / 2026-05-17 09:35:14 /owa/auth/15.0.1130/themes/resources/favicon.ico 2026-05-17 09:35:14 / show less	Web App Attack
Anonymous	2026-05-14 16:53:19 (3 weeks ago)	Blocked by UFW (TCP on 8447) Source port: 57593 TTL: 248 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 8447) Source port: 57593 TTL: 248 Packet length: 40 TOS: 0x14 This report (for 120.27.149.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 wiredalter	2026-05-07 08:15:59 (4 weeks ago)	Blocked by UFW on vhVPS [11804/tcp] Source Port: 41674 TTL: 227 Packet Length: 40 TOS: 0x00 Analyze ... show more Blocked by UFW on vhVPS [11804/tcp] Source Port: 41674 TTL: 227 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇮🇳 evicky2002	2026-05-05 06:00:00 (4 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=85, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-05 00:06:34 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/120.27.149.248 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/120.27.149.248 2026-05-04 01:25:29 /favicon.ico 2026-05-04 01:25:29 / 2026-05-04 01:25:29 / 2026-05-04 09:40:24 / show less	Web App Attack

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.5.200.98

🇺🇸 65.49.1.107

🇳🇱 204.76.203.10

🇸🇬 172.217.32.157

🇺🇸 167.71.88.63

🇸🇬 129.226.202.57

🇨🇭 104.244.74.201

🇮🇳 103.194.243.199

🇸🇬 47.84.194.167

🇨🇳 27.155.120.135

🇻🇳 14.248.82.157

🇺🇸 205.210.31.24

🇧🇷 190.115.91.128

🇮🇹 188.241.126.4

🇳🇱 176.65.139.130

🇺🇸 174.82.166.71

🇵🇰 59.103.110.141

🇮🇪 52.18.62.214

🇸🇬 47.82.13.184

🇧🇪 45.128.133.234