168.222.43.27

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
364 reports
116 reporters · latest 6 minutes ago
ISP
Doprax ApS
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Domain Name
ipxo.com
Country
🇩🇪 Germany
City
Limburg an der Lahn, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
364 from 116 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 124 🇫🇷 France 48 🇸🇬 Singapore 44
Most common categories Port Scan 213 Hacking 191 Brute-Force 23 Web App Attack 11 SSH 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Hiigara
connection attempt : 168.222.43.27 on port : tcp/8888 (Unknown)
Port Scan
🇫🇷 cityhunter_rhone
Connection attempts on sensitive port(s) 2083 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
🇫🇷 sbocquet
Port 443 scanned from 168.222.43.27:47810.
Port Scan
🇫🇷 pcouy
Multiple portscan attempts
Port Scan
Anonymous
Port Scan Brute-Force
🇫🇷 Powerful-heberg
Unsolicited connection to a honeypot port: port scan / unauthorized access attempt.
Port Scan Hacking
🇷🇺 dnsbd.tech
nftables: Port scan (TCP:6379) [srv1]
Port Scan Hacking
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe; Redis attack. 10 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
Port Scan Hacking
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 6379 from 168.222.43.27
Port Scan
🇫🇷 uthul
T-Pot honeypot: 6 hits on ports [6379] (automated)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 6379) Source port: 59565 TTL: 238 Packet length: 40 TOS: 0x00 This report (for 168.222.43.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇵🇱 mkey
Source IP from blacklist is still actively scanning our network. (6 hits in last hour, last seen 2026-11-07 11:55:05)
Port Scan
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
🇩🇪 Coinetic AI Security
Connection to a trap port: 1 attempts on port 6379, 2026-11-07 10:33 - 10:33 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 195.3.220.7
🇵🇰 103.93.219.61
🇳🇱 86.38.187.2
🇮🇷 78.109.198.118
🇪🇨 38.19.72.87
🇺🇸 216.180.246.109
🇺🇸 192.253.209.162
🇺🇸 172.104.11.46
🇺🇸 162.216.149.237
🇲🇽 148.230.214.46
🇨🇳 113.108.144.34
🇳🇱 77.239.124.162
🇻🇳 27.75.71.8
🇳🇱 185.246.190.83
🇨🇳 175.31.230.99
🇺🇸 147.185.132.163
🇫🇷 88.138.72.124
🇳🇱 77.239.124.44
🇷🇴 2.57.121.112
🇹🇳 197.0.230.179
feedback