JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.124.95.201

27.124.95.201 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 7%: ?

ISP	PT. Indonesia Comnet Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Godean, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.124.95.201

Whois 27.124.95.201

IP Abuse Reports for 27.124.95.201:

This IP address has been reported a total of 21 times from 12 distinct sources. 27.124.95.201 was first reported on February 29th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-31 06:24:43 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-07-29 00:04:40 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-07-14 00:07:17 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-12 15:25:04 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 LARL-Stompro-2024	2026-07-09 16:46:20 (2 months ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-01 03:13:45 (6 months ago)	(mod_security) mod_security (id:218580) triggered by 27.124.95.201 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218580) triggered by 27.124.95.201 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 22:13:40.164257 2026] [security2:error] [pid 30424:tid 30446] [client 27.124.95.201:39776] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:main_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.ajbruner.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.ajbruner.com"] [uri "/ct/shop/index.php"] [unique_id "aaOu5Ac00GQhPW5ejyVDsgAAAJQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-12 07:11:10 (8 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-01-06 23:04:27 (8 months ago)	[Wed Jan 07 06:04:26.361293 2026] [security2:error] [pid 326553:tid 140119385245376] [client 27.124. ... show more [Wed Jan 07 06:04:26.361293 2026] [security2:error] [pid 326553:tid 140119385245376] [client 27.124.95.201:55963] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 27% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=476&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&start=160 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&star..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aV2U-nPp ... show less	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 19:43:34 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 SMARTNET	2025-11-30 18:38:00 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-30 04:46:18 (9 months ago)	botnet	DDoS Attack
🇩🇪 SMARTNET	2025-11-26 07:00:13 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-18 20:59:36 (10 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-18 19:10:00 (10 months ago)	[Wed Nov 19 02:09:28.859299 2025] [security2:error] [pid 150326:tid 139674646382272] [client 27.124. ... show more [Wed Nov 19 02:09:28.859299 2025] [security2:error] [pid 150326:tid 139674646382272] [client 27.124.95.201:54739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".mka" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "83"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .mka found within REQUEST_FILENAME: /c7cade4903dcbb6da9c063c5b786d47d33bc989a.mka request_line = GET /c7cade4903dcbb6da9c063c5b786d47d33bc989a.mka HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/c7cade4903dcbb6da9c063c5b786d47d33bc989a.mka"] [unique_id "aRzEaOUJ0bOqOMiNxOqc0gAAjBg"] [staklim-malang.info] [staklim-malang.info] top=[150351] [/JD1MyNR5Kg] [aRzEaOUJ0bOqOMiNxOqc0gAAjBg] keep_alive=[1] [2025-11-19 02:09:28.859317] [R:aRzEaOUJ0bOqOMiNxOqc0gAAjBg] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1. ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-14 21:00:11 (10 months ago)	[Sat Nov 15 03:53:39.761715 2025] [security2:error] [pid 180913:tid 140213213972160] [client 27.124. ... show more [Sat Nov 15 03:53:39.761715 2025] [security2:error] [pid 180913:tid 140213213972160] [client 27.124.95.201:60333] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=619&id=2443%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-februari-2017&start=40 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=619&id=2443%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-februari-2017&start=40..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aReW0wVgNBx2x ... show less	Hacking Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 180.93.227.64

🇧🇷 152.32.199.20

🇧🇬 78.128.113.22

🇩🇪 78.43.159.7

🇰🇪 41.203.212.69

🇿🇦 41.169.32.30

🇺🇸 18.97.5.42

🇫🇷 2001:41d0:404:200::4c47

🇰🇷 211.223.107.86

🇺🇸 184.57.73.112

🇩🇪 178.16.52.154

🇨🇳 175.21.248.94

🇨🇳 171.12.10.37

🇷🇺 85.175.100.132

🇳🇱 77.239.124.130

🇺🇸 173.255.223.62

🇺🇸 162.216.150.16

🇯🇵 153.126.165.228

🇺🇸 147.185.132.116

🇨🇳 139.212.70.14