27.18.68.199
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
25 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 jcbriar |
Searching for vulnerable scripts
|
Hacking Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 7245 [1] TCP
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 9100.
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 Cherryh4ck |
Blocked by UFW [8040/tcp] | SPT: 47388 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [37443/tcp]
Source port: 45994
TTL: 233
Packet length: 44
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to Oracle SQL port 1521) detectado de 27.18.68.199
|
Port Scan Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/5888 (2 or more attempts)
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 82 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 2697.
|
Port Scan Hacking | |
| 🇩🇪 _ArminS_ |
SP-Scan 64457:7073 detected 2026.09.13 07:52:59
blocked until 2026.11.01 23:55:46
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Large payload (1457 bytes); 27009 [1] TCP
|
Bad Web Bot | |
| Anonymous |
Network service scanning detected by FortiGate; source quarantined.
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 98.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown