27.130.76.126

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
86% Critical
29 reports
17 reporters · latest 1 day ago
ISP
Advanced Wireless Network Company Limited
Usage Type
Fixed Line ISP
ASN
AS133481
Domain Name
ais.th
Country
🇹🇭 Thailand
City
Bangkok, Bangkok
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇫🇷 France 6 🇩🇪 Germany 4
Most common categories Port Scan 25 Hacking 4 Brute-Force 3 Web App Attack 2 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/37215 (2 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 MPL
tcp/52869 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/52869
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:30489 dst:23
Port Scan
🇫🇮 Birdo
Exploited Host Hacking Web App Attack Port Scan
🇺🇸 MPL
tcp/37215
Port Scan
🇺🇸 MPL
tcp/37215 (2 or more attempts)
Port Scan
🇩🇪 jann
Honeypot: connection to unused port 23 at 2026-11-06 12:02:52 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇺🇸 MPL
tcp/52869
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (52869/tcp) [non-standard port]
Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 52869) Source port: 64130 TTL: 48 Packet length: 40 TOS: 0x00 This report (for 27.130.76.126) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 drewf.ink
[06:05] Port scanning. Port(s) scanned: TCP/52869
Port Scan
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 165.154.163.10
🇨🇳 58.221.60.25
🇳🇱 213.209.159.236
🇺🇸 199.165.159.219
🇺🇸 195.184.76.195
🇺🇸 166.239.184.117
🇮🇳 125.20.230.46
🇰🇷 121.169.14.188
🇺🇸 74.249.194.1
🇨🇳 58.212.234.82
🇳🇱 45.148.10.240
🇲🇾 210.195.31.58
🇬🇹 190.56.171.219
🇳🇱 164.92.214.237
🇮🇹 151.32.124.23
🇫🇮 147.185.133.202
🇨🇳 111.10.160.168
🇸🇬 101.47.20.56
🇺🇸 98.175.205.145
🇳🇱 77.239.124.48
feedback