27.159.75.50
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET FUJIAN PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Fuzhou, Fujian
Abuse Reports
Total reports
448 from
111 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 bmino.pl |
Autoban IP(2): 27.159.75.50 - Hostname: Chinanet - City: Wenquan - Country: China - Organization: Chinanet FJ - Reason: GET /author/aga HTTP/2.0
|
Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 2 application-level events across 2 source port(s). Sensor(s): H0neytr4p.
|
Port Scan | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇩🇪 klaus_ph |
27.159.75.50 - - [05/Nov/2026:18:13:41 +0100] "GET / HTTP/1.1" 301 515 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Mobile Safari/537.36"
...
|
Bad Web Bot | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
|
Bad Web Bot Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 10259)
Source port: 42836
TTL: 48
Packet length: 60
TOS: 0x08
This report (for 27.159.75.50) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 27.159.75.50: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇪🇸 Michael McCarthy |
|
Web Spam | |
| 🇭🇺 kranem |
Triggered Cloudflare WAF from CN.
Action taken: BLOCK
ASN: 4134 (CHINANET BACKBONE)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-02T22:39:39Z
User-Agent: Mozilla/5.0 (Android 10; Mobile; rv:89.0) Gecko/89.0 Firefox/89.0
|
Bad Web Bot | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on a protected site (sec-fetch-before-safari-16)
|
DDoS Attack | |
| 🇩🇪 klaus_ph |
[Thu Oct 29 23:22:33.197681 2026] [ssl:info] [pid 1086752] [client 27.159.75.50:55431] AH01964: Connection to child 9 established (server fit.vufindnet.de:443)
...
|
Hacking | |
| 🇺🇸 omc |
Unauthorized file [PP].
|
Bad Web Bot | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| Anonymous |
crawler behavior: HTTP GET on a non-existent endpoint
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown