JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.123.77.27

144.123.77.27 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 89%: ?

89%

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.123.77.27

Whois 144.123.77.27

IP Abuse Reports for 144.123.77.27:

This IP address has been reported a total of 48 times from 25 distinct sources. 144.123.77.27 was first reported on January 10th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 terraforge.fun	2026-06-24 13:54:15 (16 hours ago)	Blocked by on us-2-terraforge [9092/tcp] \| SPT: 45971 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by ... show more Blocked by on us-2-terraforge [9092/tcp] \| SPT: 45971 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by: terraforge.fun show less	Port Scan
🇳🇱 StopAbuse	2026-06-24 10:20:11 (19 hours ago)	tcp/50111	Port Scan
🇷🇸 Scan	2026-06-23 01:52:57 (2 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 Petre 21_ip	2026-06-21 12:14:17 (3 days ago)	2026-06-21T14:14:17.035692+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-21T14:14:17.035692+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=144.123.77.27 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=24376 PROTO=TCP SPT=53162 DPT=1010 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-21 08:53:59 (3 days ago)	Blocked by UFW on LAXHH [2016/tcp] \| SPT: 43301 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2016/tcp] \| SPT: 43301 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-06-19 12:51:41 (5 days ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 2174 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 2174 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇷🇸 Scan	2026-06-19 02:45:36 (6 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-06-18 23:06:05 (6 days ago)	tcp/5000	Port Scan
🇺🇸 itsnixk	2026-06-18 07:57:01 (6 days ago)	(mod_security) mod_security (id:920350) triggered by 144.123.77.27 (CN/China/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:920350) triggered by 144.123.77.27 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 03:56:59.480774 2026] [security2:error] [pid 516369:tid 516807] [client 144.123.77.27:35479] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ajOky6jH1sMshsuUKxCwaAAAAGk"] show less	Port Scan
🇩🇪 femboy.cat	2026-06-17 19:57:04 (1 week ago)	Port scan to tcp/18014 from 144.123.77.27	Brute-Force
🇺🇸 Axel	2026-06-17 04:42:37 (1 week ago)	Blocked by UFW on LAXHH [2020/tcp] \| SPT: 62122 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2020/tcp] \| SPT: 62122 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 TheHoneyPotter	2026-06-17 03:31:02 (1 week ago)	Honeypot [fc-honeypot]: Empty payload (likely service probe); 2601 [1] TCP Reported by: https://gith ... show more Honeypot [fc-honeypot]: Empty payload (likely service probe); 2601 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 MPL	2026-06-15 21:46:46 (1 week ago)	tcp/6667	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-14 06:10:38 (1 week ago)	Honeypot [nx-infrastructure]: Large payload (1457 bytes); 17111 [1] TCP Reported by: Justin F.	Bad Web Bot
🇺🇸 Axel	2026-06-13 03:17:17 (1 week ago)	Blocked by UFW on LAXHH [9090/tcp] \| SPT: 58894 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9090/tcp] \| SPT: 58894 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.86

🇵🇰 202.63.202.211

🇺🇸 185.139.214.166

🇩🇪 172.253.1.210

🇺🇸 107.150.98.168

🇵🇰 37.111.163.132

🇸🇬 192.161.164.176

🇨🇱 190.114.39.112

🇺🇸 172.234.192.12

🇺🇸 148.105.11.115

🇨🇮 102.67.201.15

🇳🇱 80.82.77.202

🇸🇬 45.43.63.68

🇧🇷 45.38.89.123

🇷🇴 2.57.121.25

🇺🇸 207.90.244.22

🇳🇱 204.76.203.206

🇬🇧 195.206.182.217

🇲🇽 187.192.86.153

🇩🇪 185.242.3.226