This IP address has been reported a total of
11
times from
9 distinct
sources.
27.124.75.195 was first reported on
October 15th 2026 , and the most recent report was
1 hour ago France
with 6
reports;
Germany
with 3
reports;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Port Scan
9
times;
Hacking
3
times;
Email Spam
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
guldkage
2026-10-25 07:49:50
(1 hour ago)
Unauthorized connection attempt detected from IP address 27.124.75.195 to port 445 (ger-02) [SMB]
Exploited Host
🇮🇩
hermawan
2026-10-24 10:27:42
(22 hours ago)
[Sat Oct 24 17:27:41.660189 2026] [security2:error] [pid 1189561:tid 140102571390656] [client 27.124 ...
show more
[Sat Oct 24 17:27:41.660189 2026] [security2:error] [pid 1189561:tid 140102571390656] [client 27.124.75.195:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:referer: https://www.google.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "atyIHZYYkEJ9X1luAKenCAAAAAE"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1189615] [j4X2i5MVv1U] [atyIHZYYkEJ9X1luAKenCAAAAAE] keep_alive=[0] [2026-10-24 17:27:41.660197] [R:atyIHZYYkEJ9X1luAKenCAAAAAE] UA:'Mozilla/5.0 (Linux; Android 14; SM-A528B) AppleWebKit/537.36 (KHTML, lik
...
show less
Email Spam
Hacking
🇫🇷
Kejult
2026-10-23 16:23:53
(1 day ago)
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
Port Scan
🇩🇪
jann
2026-10-22 01:03:21
(3 days ago)
Honeypot: connection to unused port 445 at 2026-10-22 01:03:21 UTC. No service runs there, any conne ...
show more
Honeypot: connection to unused port 445 at 2026-10-22 01:03:21 UTC. No service runs there, any connection is unsolicited scanning.
show less
Port Scan
🇳🇱
EGP Abuse Dept
2026-10-21 02:14:42
(4 days ago)
Unsolicited connection to port 445
Port Scan
Hacking
🇫🇷
Coco Bongo
2026-10-20 07:27:00
(5 days ago)
1792481219 - 10/20/2026 09:26:59 Host: 27.124.75.195/27.124.75.195 Port: 445 TCP Blocked
...
Port Scan
🇫🇷
AmStaff
2026-10-19 08:16:42
(6 days ago)
Honeypot: SMB exploitation attempts. Targeted ports: SMB.
Port Scan
Hacking
2026-10-18 17:02:09
(6 days ago)
Unauthorized access (445/tcp/microsoft-ds)
Port Scan
🇫🇷
Kejult
2026-10-17 07:51:31
(1 week ago)
Honeypot Finding: SMB activity on TCP/445; 5 Dionaea events.
Port Scan
🇫🇷
sthoyer.de
2026-10-15 16:44:06
(1 week ago)
Oct 15 18:44:03 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 15 18:44:03 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=27.124.75.195 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=14835 DF PROTO=TCP SPT=54374 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
sthoyer.de
2026-10-15 10:51:29
(1 week ago)
Oct 15 12:51:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 15 12:51:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=27.124.75.195 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=18692 DF PROTO=TCP SPT=52311 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
Showing 1 to
11
of 11 reports
