27.19.153.164
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Hubei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS137266
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Wuhan, Hubei
Abuse Reports
Total reports
17 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/7090 (2 or more attempts)
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [27017/tcp] | SPT: 32191 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 _ArminS_ |
SP-Scan 29322:10010 detected 2026.08.12 07:14:59
blocked until 2026.10.01 00:17:46
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [3000/tcp] | SPT: 27753 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1028
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 12498 [1] TCP
|
Port Scan | |
| 🇩🇪 centurion |
Unauthorized attempt on lab [2222/tcp]
Source port: 46695
TTL: 237
Packet length: 44
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 10421.
|
Port Scan Hacking | |
| Anonymous |
Port scan on port 49665/TCP to unused IP
|
Port Scan | |
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 12276
|
Brute-Force SSH | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Severity: MEDIUM. Aaran.cloud
|
Brute-Force Hacking | |
| 🇺🇸 MPL |
tcp/6379
|
Port Scan | |
| 🇺🇸 MPL |
tcp/443 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown