27.18.68.235

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
25% Elevated
17 reports
11 reporters · latest 1 week ago
ISP
CHINANET Hubei province network
Usage Type
Fixed Line ISP
ASN
AS137266
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Wuhan, Hubei
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇺🇸 United States of America 2 🇭🇰 Hong Kong 1
Most common categories Port Scan 7 Hacking 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 9443.
Port Scan Hacking
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 10016) Source port: 54586 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 27.18.68.235) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱 donarev419
Connection to port 9042 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:9042 Accept: */*
Port Scan Hacking
🇭🇰 sandra361
Port scan detected: 6 attempts across 1 port (12239). | Evidence: REAPER_TARPIT: IN=eth0 SRC=27.18.68.235 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=16560 DF PROTO=TCP SPT=52682 DPT=12239 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 12407.
Port Scan Hacking
🇺🇸 OceanTreasure
tcp/20202; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-22T18:11:40Z
Port Scan
🇨🇦 Slackin' Jack
Triggered honeypot on port 9000. (27.18.68.235)
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 11.
Port Scan Hacking
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-template.espresso-gridpoint.net
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 50498.
Port Scan Hacking
🇺🇸 Axel
Blocked by UFW on LAXHH [7547/tcp] | SPT: 47920 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=26042 dstport=2053
Port Scan Hacking
🇺🇸 Axel
Blocked by UFW on LAXHH [1947/tcp] | SPT: 48592 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 Axel
Blocked by UFW on LAXHH [505/tcp] | SPT: 45563 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.243
🇹🇼 198.235.24.109
🇧🇷 104.234.84.68
🇳🇱 103.112.69.15
🇮🇷 85.185.239.40
🇿🇦 41.135.76.73
🇹🇷 213.250.151.217
🇫🇮 193.187.110.160
🇧🇷 177.22.195.59
🇵🇱 162.158.102.163
🇳🇱 80.82.65.202
🇮🇷 2.180.1.198
🇳🇱 212.92.83.183
🇺🇸 162.216.150.86
🇳🇿 103.108.94.173
🇳🇱 77.239.124.49
🇫🇮 37.27.12.62
🇳🇱 195.178.110.30
🇨🇳 119.96.131.8
🇳🇱 109.160.32.102
feedback