JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

178.18.96.252

Recent Activity

Abuse confidence score ?

86% Critical

24 reports

17 reporters · latest 7 hours ago

ISP	Joint Stock Company TransTeleCom
Usage Type	Fixed Line ISP
ASN	AS8427
Hostname(s)	747279131.vpn.mgn.ru
Domain Name	transtelecom.net
Country	🇷🇺 Russian Federation
City	Magnitogorsk, Chelyabinsk

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 178.18.96.252

This IP address has been reported a total of 24 times from 17 distinct sources. 178.18.96.252 was first reported on February 15th 2021, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: United States of America with 7 reports; Germany with 5 reports; Belarus with 3 reports. The most common categories in these recent reports were: Port Scan 19 times; Brute-Force 5 times; Hacking 4 times; IoT Targeted 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-09-28 09:44:10 (7 hours ago)	Port Scan Attack proto:TCP src:21442 dst:23	Port Scan
🇺🇸 RAP	2026-09-28 07:30:00 (9 hours ago)	2026-09-28 07:30:00 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-09-28 05:38:47 (11 hours ago)	Sep 27 18:16:32 localhost kernel: [118892476.161746] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 27 18:16:32 localhost kernel: [118892476.161746] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=178.18.96.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=53729 PROTO=TCP SPT=17420 DPT=23 WINDOW=49074 RES=0x00 SYN URGP=0 Sep 27 18:16:32 localhost kernel: [118892476.161754] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=178.18.96.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=53729 PROTO=TCP SPT=17420 DPT=23 SEQ=758669438 ACK=0 WINDOW=49074 RES=0x00 SYN URGP=0 Sep 28 01:38:46 localhost kernel: [118919009.889752] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=178.18.96.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=53729 PROTO=TCP SPT=64852 DPT=23 WINDOW=5538 RES=0x00 SYN URGP=0 Sep 28 01:38:46 localhost kernel: [118919009.889782] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=178.18.96.252 DST=[mungedIP2] LEN=40 TOS=0x00 PREC show less	Port Scan
🇩🇪 reznekcs	2026-09-28 05:02:11 (12 hours ago)	Blocked by UFW firewall	Brute-Force
🇩🇪 zupan	2026-09-28 04:35:43 (12 hours ago)	Blocked by UFW on vps [23/tcp] \| SPT: 44424 \| TTL: 55 \| LEN: 40 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on vps [23/tcp] \| SPT: 44424 \| TTL: 55 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇩🇪 Admins@FBN	2026-09-28 01:47:43 (15 hours ago)	FW-PortScan: Traffic Blocked srcport=56732 dstport=23	Port Scan
🇺🇸 xmission.com	2026-09-27 22:05:56 (19 hours ago)	Blocked by UFW (TCP on 23) Source port: 17420 TTL: 49 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 17420 TTL: 49 Packet length: 40 TOS: 0x00 This report (for 178.18.96.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-09-27 20:39:10 (20 hours ago)	23/tcp (1 or more attempts)	Port Scan
🇧🇾 sashan	2026-09-27 20:10:56 (21 hours ago)	2026-09-27T23:10:55.898128+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=178.18.96.2 ... show more 2026-09-27T23:10:55.898128+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=178.18.96.252 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=40760 PROTO=TCP SPT=13431 DPT=23 WINDOW=7485 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 RAP	2026-09-27 16:58:58 (1 day ago)	2026-09-27 16:58:58 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-09-27 10:02:42 (1 day ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 55 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 55 \| Len: 44B \| Win: 2629(1) \| rDNS: 747279131.vpn.mgn.ru \| F2B/ufw-honeypot@2026-09-27T10:02:42Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-09-27 09:21:09 (1 day ago)	Blocked by UFW (TCP on 23) Source port: 14563 TTL: 51 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 14563 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 178.18.96.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-09-27 07:50:06 (1 day ago)	Port Scan Attack proto:TCP src:19571 dst:23	Port Scan
🇧🇾 sashan	2026-09-27 06:58:36 (1 day ago)	2026-09-27T09:58:35.686313+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=178.18.96.2 ... show more 2026-09-27T09:58:35.686313+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=178.18.96.252 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=40760 PROTO=TCP SPT=9341 DPT=23 WINDOW=34262 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 celestialcity	2026-09-27 06:50:00 (1 day ago)	Blocked by UFW on celestialcityna [23/tcp] \| SPT: 48042 \| TTL: 46 \| LEN: 40 \| TOS: 0x00 • Reported b ... show more Blocked by UFW on celestialcityna [23/tcp] \| SPT: 48042 \| TTL: 46 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.173

🇬🇧 172.70.163.57

🇬🇧 172.70.86.224

🇬🇧 172.69.195.238

🇺🇸 148.163.135.253

🇫🇷 91.231.89.81

🇸🇬 45.78.230.231

🇺🇸 2604:a880:800:14:0:3:91d1:2000

🇺🇸 216.126.239.163

🇺🇸 198.153.94.124

🇺🇸 195.184.76.218

🇳🇬 165.154.11.37

🇵🇰 154.208.58.161

🇺🇸 107.172.132.201

🇸🇬 104.28.163.45

🇺🇸 66.132.186.199

🇳🇱 45.148.10.240

🇺🇸 34.73.134.30

🇺🇸 34.42.131.76

🇺🇸 13.59.132.170