27.18.149.216
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
20 from
16 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:34679 dst:23
|
Port Scan | |
| 🇩🇪 numberstorm |
|
Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/23 (Telnet)
|
Port Scan | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 27.18.149.216 to port 23 (ger-01) [TELNET]
|
Exploited Host | |
| 🇦🇺 Block Rockin' Beats |
Attempted connection to TCP port 23
|
Port Scan | |
| 🇧🇷 aosafeshield |
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-26 20:07:29 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-26 10:04:02 | LAST=2026-10-26 10:04:03. Last seen 2026-10-26 10:04:03.
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:60445 dst:23
|
Port Scan | |
| 🇺🇸 onyxdev |
Honeypot (telnet): 1 login attempt, 540 shell commands, 12 malware download attempts.
|
Hacking Brute-Force IoT Targeted | |
| 🇩🇪 acadeova |
Blocked by UFW on vps4 [23/tcp]
Source port: 45361
TTL: 55
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇺🇸 RAP |
2026-10-25 22:10:48 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇧🇾 sashan |
2026-10-25T23:15:00.430009+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=27.18.149.216 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=31262 DF PROTO=TCP SPT=36877 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 nothanks |
Honeypot: TELNET login attempts (1 attempt, users: root) followed by 51 shell commands between 2026-10-25T15:44Z and 2026-10-25T15:45Z.
|
Hacking Brute-Force IoT Targeted | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown