JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.16.192.196

27.16.192.196 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 73%: ?

73%

ISP	CHINANET Hubei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.16.192.196

Whois 27.16.192.196

IP Abuse Reports for 27.16.192.196:

This IP address has been reported a total of 18 times from 16 distinct sources. 27.16.192.196 was first reported on May 20th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-07-12 20:42:12 (12 hours ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 27.16.192.196 (CN/China ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 27.16.192.196 (CN/China/-) show less	Hacking
🇫🇮 6kilowatti	2026-07-12 19:32:15 (13 hours ago)	2026-07-12T22:32:14.716791+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-12T22:32:14.716791+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=27.16.192.196 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=5719 PROTO=TCP SPT=46013 DPT=2467 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇭🇰 sandra361	2026-07-12 19:21:23 (13 hours ago)	Port scan detected: 8 attempts across 1 port (9083). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=27.16.19 ... show more Port scan detected: 8 attempts across 1 port (9083). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=27.16.192.196 LEN=40 TOS=0x14 PREC=0x00 TTL=46 ID=19735 DF PROTO=TCP SPT=12322 DPT=9083 WINDOW=29200 RES=0x00 ACK URGP=0 show less	Port Scan
Anonymous	2026-07-12 09:25:42 (23 hours ago)	Honeypot hit: Large payload (1457 bytes); 28017 [1] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1457 bytes); 28017 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇧🇷 SOC Blue Team	2026-07-09 05:25:56 (4 days ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇳🇱 BIV	2026-07-09 05:06:23 (4 days ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 50999. Automated t ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 50999. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇺🇸 Axel	2026-07-08 21:13:50 (4 days ago)	Blocked by UFW on LAXHH [6502/tcp] \| SPT: 65478 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [6502/tcp] \| SPT: 65478 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ghostwarriors	2026-07-01 03:20:35 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 centurion	2026-06-30 06:40:39 (1 week ago)	Blocked by UFW on ns02 [2091/tcp] Source port: 49898 TTL: 236 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [2091/tcp] Source port: 49898 TTL: 236 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 NordhTech	2026-06-30 05:00:48 (1 week ago)	More than 3 malicious connection attempts, trying port(s) 14534/tcp, then blocked from services ...	Port Scan Hacking
🇩🇪 anycast_ac	2026-06-29 10:23:17 (1 week ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/27017 (generic). Commands captu ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/27017 (generic). Commands captured: $ USER anonymous show less	DDoS Attack IoT Targeted Brute-Force
Anonymous	2026-06-18 04:42:31 (3 weeks ago)	Honeypot hit: Large payload (1457 bytes); 8086 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 8086 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 MPL	2026-06-17 23:32:50 (3 weeks ago)	tcp/12310	Port Scan
🇺🇸 Axel	2026-06-17 17:55:24 (3 weeks ago)	Blocked by UFW on LAXHH [8086/tcp] \| SPT: 29696 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8086/tcp] \| SPT: 29696 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-17 14:21:54 (3 weeks ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.84.101.167

🇺🇸 138.68.3.80

🇨🇳 116.179.37.26

🇺🇸 103.153.183.245

🇺🇸 91.230.168.250

🇺🇸 64.62.156.63

🇹🇼 49.158.208.139

🇺🇸 44.220.188.210

🇺🇦 31.42.184.185

🇳🇱 185.224.128.16

🇧🇷 179.189.205.235

🇺🇸 157.245.1.7

🇻🇳 112.137.143.2

🇺🇸 91.230.168.15

🇧🇬 78.128.114.110

🇧🇪 34.156.36.110

🇺🇸 20.124.84.235

🇺🇸 20.64.104.114

🇰🇷 175.214.123.177

🇹🇹 138.59.24.124