27.18.59.196
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
18 from
10 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 MPL |
tcp/12121 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 2154.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 16000.
|
Port Scan Hacking | |
| 🇧🇷 SOC Blue Team |
IPs get by Hunting on SIEM
|
Phishing Web Spam Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (49158/tcp) [non-standard port]
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/15004
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 2446.
|
Port Scan Hacking | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 1443
GET /
Accept: */*; 1443 [1] TCP
|
Hacking Bad Web Bot | |
| 🇺🇸 donarev419 |
Connection to port 17007 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 9080.
|
Port Scan Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [2142/tcp] | SPT: 17959 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown