JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.111.11.11

27.111.11.11 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 25%: ?

25%

ISP	WiCAM Corporation Ltd.
Usage Type	Fixed Line ISP
ASN	AS24492
Domain Name	wicam.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.111.11.11

Whois 27.111.11.11

IP Abuse Reports for 27.111.11.11:

This IP address has been reported a total of 9 times from 6 distinct sources. 27.111.11.11 was first reported on October 19th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 origrata	2026-09-08 21:51:50 (1 week ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /ojs3/journals \| UA: Mozilla/5.0 (Windo ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /ojs3/journals \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa show less	Web App Attack
🇮🇩 origrata	2026-09-08 21:51:49 (1 week ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /arsip_jurnal/journals \| UA: Mozilla/5. ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /arsip_jurnal/journals \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa show less	Web App Attack
🇮🇩 origrata	2026-09-08 21:51:49 (1 week ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /storage_ojs/journals \| UA: Mozilla/5.0 ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /storage_ojs/journals \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa show less	Web App Attack
🇮🇩 origrata	2026-09-08 21:51:49 (1 week ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /jurnal_data/journals \| UA: Mozilla/5.0 ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /jurnal_data/journals \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa show less	Web App Attack
🇬🇷 Staging	2026-09-08 10:47:00 (1 week ago)	naaaaah !	Bad Web Bot Hacking
🇺🇸 www.winos.me	2026-09-07 06:32:23 (1 week ago)	Scanning for sensitive files/paths: /wp-login.php	Hacking Web App Attack
🇮🇹 VHosting	2026-09-03 05:50:03 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 03:32:23 (4 months ago)	(mod_security) mod_security (id:217291) triggered by 27.111.11.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217291) triggered by 27.111.11.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 23:32:17.720212 2026] [security2:error] [pid 22760:tid 22802] [client 27.111.11.11:57863] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|annie-interface.org:80\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "annie-interface.org"] [uri "/g12privacy.php"] [unique_id "aemSwWrot14Muyzmo7eXjQAAAYs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mawan	2025-10-19 10:53:32 (10 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.200

🇳🇱 164.92.211.98

🇮🇩 163.7.3.154

🇦🇿 37.114.185.66

🇺🇸 216.150.1.242

🇹🇳 196.179.228.72

🇮🇩 182.253.171.213

🇧🇷 177.102.180.150

🇧🇬 109.160.32.216

🇸🇬 103.189.235.182

🇱🇹 62.60.130.201

🇺🇸 3.129.187.38

🇬🇧 193.176.29.10

🇫🇷 91.196.152.219

🇸🇬 51.79.199.26

🇺🇸 216.150.1.143

🇧🇩 103.182.212.33

🇧🇩 103.153.170.110

🇨🇦 85.217.149.32

🇹🇼 59.126.224.134