27.18.68.211
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
27 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-28 06:39, Last: 2026-10-30 10:52 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-16 11:54, Last: 2026-10-23 08:11 UTC. Triggers: unknown.
|
Port Scan | |
| 🇷🇸 Smel |
Unauthorized Probe/Connection, Hack -
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (14443/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-10-02 11:28 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-09 19:50, Last: 2026-09-24 10:15 UTC. Triggers: unknown.
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 6405.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-08-25 17:09, Last: 2026-09-06 08:17 UTC. Triggers: unknown.
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 1311 proto 6 detection dark_ip
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 12208.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/10016 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-05-18 16:47, Last: 2026-08-20 06:47 UTC. Triggers: non-public-port,firewall-tcp,unknown.
|
Port Scan | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 13013
GET /
Accept: */*; 13013 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [4369/tcp] | SPT: 27127 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: Empty payload (likely service probe); 6581 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown