27.18.90.173
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
23 from
7 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-23 08:11, Last: 2026-10-30 10:52 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-20 19:36 UTC. Triggers: unknown.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 2031
GET /
Accept: */*; 2031 [1] TCP
|
Web App Attack | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (4856). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=27.18.90.173 LEN=97 TOS=0x00 PREC=0x00 TTL=45 ID=37443 DF PROTO=TCP SPT=31813 DPT=4856 WINDOW=29200 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 16026 [1] TCP
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2012.
|
Port Scan | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-09-22 20:16, Last: 2026-09-29 19:18 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 8 attempts across 1 port (10900). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=27.18.90.173 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=17207 DF PROTO=TCP SPT=52279 DPT=10900 WINDOW=29200 RES=0x00 ACK URGP=0
|
Port Scan | |
| 🇺🇸 MPL |
tcp/2168 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/21236 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 53781.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 24644 [1] TCP
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 9418.
|
Port Scan Hacking | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-04 06:51, Last: 2026-09-09 19:50 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-08-23 09:26, Last: 2026-08-25 17:09 UTC. Triggers: non-public-port,firewall-tcp,unknown.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown