27.18.59.238
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
27 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 1000.
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-13 UTC.
|
Hacking | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Oracle TNS Probe (1521/tcp)
|
Port Scan Hacking | |
| 🇨🇭 dirtronin |
Honeypot connection to elastic decoy port — banner-match: . Source: HyveHeim/HyveGuard tripwire (auto-report).
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/9303 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 5 packets across 1 port (8888). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=27.18.59.238 LEN=56 TOS=0x00 PREC=0x00 TTL=45 ID=16667 DF PROTO=TCP SPT=11189 DPT=8888 WINDOW=29200 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:13068 dst:3306
|
Port Scan | |
| Anonymous |
Blocked by firewall on hugin [880/tcp] | Rule: UFW | SPT: 40543 | TTL: 238 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇦🇺 paulshipley.com.au |
valueaddedpromotions.com.au:443 27.18.59.238 - - [06/Oct/2026:10:18:56 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 164183 "-" "Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
...
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/16660
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 10016.
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 20022.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 20108
GET /
Accept: */*; 20108 [1] TCP
|
Web App Attack | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (2741/tcp) [non-standard port]
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown