27.109.142.87

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
51% Elevated
19 reports
17 reporters ยท latest 2 hours ago
ISP
CTM
Usage Type
Fixed Line ISP
ASN
AS4609
Domain Name
ctm.com.mo
Country
๐Ÿ‡ฒ๐Ÿ‡ด Macao
City
Macau
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 5 ๐Ÿ‡จ๐Ÿ‡ญ Switzerland 2 ๐Ÿ‡ซ๐Ÿ‡ท France 2
Most common categories Port Scan 11 Hacking 5 Brute-Force 3 Bad Web Bot 2 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช kingjan1999
Blocked by UFW [8282/tcp] | SPT: 50143 | TTL: 242 | LEN: 40 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 3 application-level events across 3 source port(s). Sensor(s): H0neytr4p.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ mnazibo
Date: Nov 02 09:07:21 2026 EAT | Reported IP: 27.109.142.87 mod_security | id: 920350 | MO/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address
SQL Injection Brute-Force Bad Web Bot
๐Ÿ‡ต๐Ÿ‡ฑ sefinek.net
Honeypot hit: HTTP/1.0 request on 8282 GET / Accept: text/plain,text/html; 8282 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
๐Ÿ‡ฏ๐Ÿ‡ต jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (78 distinct dst hosts)
Port Scan
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (8080/tcp) [non-standard port]
Port Scan Hacking
Anonymous
Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.
Hacking
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 204 payload byte(s) total, maximum payload 69 byte(s). Target port(s): 8090.
Port Scan Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 8080 with data transfer. Data preview: GET / HTTP/1.0 Host: 87.229.95.155 Accept: text/plain,text/html
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช reznekcs
Blocked by UFW firewall
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 8001/tcp
Port Scan
๐Ÿ‡จ๐Ÿ‡ญ Elysium Security
Mass port scanning on a whole network
Port Scan
๐Ÿ‡จ๐Ÿ‡ญ pingusurmars
Blocked by UFW on amperetwo [8081/tcp] Source port: 47179 TTL: 236 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
trying to access non-authorized port
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-09-15T19:25Z).
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 172.67.202.125
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.118
๐Ÿ‡ป๐Ÿ‡ณ 58.186.20.143
๐Ÿ‡ธ๐Ÿ‡ฌ 47.128.61.241
๐Ÿ‡ฎ๐Ÿ‡ฉ 43.129.56.7
๐Ÿ‡บ๐Ÿ‡ธ 20.65.170.225
๐Ÿ‡ง๐Ÿ‡ท 187.22.246.228
๐Ÿ‡ง๐Ÿ‡ผ 168.167.228.85
๐Ÿ‡บ๐Ÿ‡ธ 164.92.112.151
๐Ÿ‡ฎ๐Ÿ‡ณ 141.148.207.84
๐Ÿ‡ฌ๐Ÿ‡ง 90.200.95.77
๐Ÿ‡ณ๐Ÿ‡ฑ 77.67.26.113
๐Ÿ‡จ๐Ÿ‡ณ 59.36.78.66
๐Ÿ‡ต๐Ÿ‡ฑ 34.158.230.128
๐Ÿ‡บ๐Ÿ‡ธ 34.70.25.152
๐Ÿ‡บ๐Ÿ‡ธ 20.65.146.94
๐Ÿ‡บ๐Ÿ‡ธ 205.210.31.100
๐Ÿ‡ต๐Ÿ‡ญ 202.69.171.60
๐Ÿ‡ณ๐Ÿ‡ฑ 200.162.154.60
๐Ÿ‡จ๐Ÿ‡ด 186.119.112.113
feedback