JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.175.68.23

178.175.68.23 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 45%: ?

45%

ISP	Telekomi i Kosovës
Usage Type	Fixed Line ISP
ASN	AS8661
Domain Name	kosovotelecom.com
Country	🇽🇰 Kosovo
City	Peje, Pec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.175.68.23

Whois 178.175.68.23

IP Abuse Reports for 178.175.68.23:

This IP address has been reported a total of 26 times from 11 distinct sources. 178.175.68.23 was first reported on February 20th 2021, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geeek	2026-06-05 12:00:49 (6 hours ago)	Port scanning: 445 TCP Blocked	Port Scan
🇦🇹 urnilxfgbez	2026-06-04 22:45:00 (19 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 drewf.ink	2026-05-26 08:14:18 (1 week ago)	[08:14] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [08:14] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-20 05:38:32 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇵🇱 nfsec.pl	2026-05-19 20:35:58 (2 weeks ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇫🇷 vtchost.com	2026-05-18 21:16:21 (2 weeks ago)	May 18 23:16:21 vtchost kernel: [50350.263482] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more May 18 23:16:21 vtchost kernel: [50350.263482] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=178.175.68.23 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=8927 DF PROTO=TCP SPT=31403 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-05-18 00:50:05 (2 weeks ago)	May 18 02:50:03 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 18 02:50:03 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=178.175.68.23 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=10074 DF PROTO=TCP SPT=57513 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-05-14 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 vtchost.com	2026-05-08 02:57:25 (4 weeks ago)	May 8 04:57:25 vtchost kernel: [93437.464755] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more May 8 04:57:25 vtchost kernel: [93437.464755] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=178.175.68.23 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=4273 DF PROTO=TCP SPT=61556 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-05-05 07:25:17 (1 month ago)	May 5 09:25:16 vtchost kernel: [173256.811073] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more May 5 09:25:16 vtchost kernel: [173256.811073] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=178.175.68.23 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=5597 DF PROTO=TCP SPT=65166 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-04-29 15:10:42 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇳🇱 knock	2026-04-28 11:05:22 (1 month ago)	Knock-Knock honeypot brute-force: SMB (4 total hits)	Brute-Force
🇺🇸 drewf.ink	2026-04-26 00:01:02 (1 month ago)	[00:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [00:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-04-24 17:44:22 (1 month ago)	HoneyPot hit - Aaran.cloud \| Smb Exploit \| network exploitation \| TSMBr(/K^1LANMAN1.0LM1.2X002NT LAN ... show more HoneyPot hit - Aaran.cloud \| Smb Exploit \| network exploitation \| TSMBr(/K^1LANMAN1.0LM1.2X002NT LANMAN 1.0NT LM 0.12 show less	Hacking
🇫🇷 vtchost.com	2026-04-23 08:07:09 (1 month ago)	Apr 23 10:07:08 vtchost kernel: [89201.383869] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Apr 23 10:07:08 vtchost kernel: [89201.383869] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=178.175.68.23 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=914 DF PROTO=TCP SPT=32563 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.220

🇧🇷 191.33.76.49

🇳🇴 185.181.61.201

🇷🇺 176.120.22.113

🇭🇰 152.32.189.121

🇳🇱 93.123.109.127

🇰🇷 59.15.58.148

🇧🇪 35.187.86.228

🇸🇪 31.208.108.219

🇨🇳 210.16.168.11

🇷🇴 193.32.162.206

🇩🇪 165.227.170.113

🇨🇳 120.84.228.63

🇺🇸 94.183.232.247

🇺🇸 74.7.227.183

🇳🇱 20.71.254.235

🇨🇳 14.103.115.233

🇺🇸 216.25.89.113

🇷🇴 92.118.39.236

🇳🇱 45.148.10.152