JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.124.95.70

27.124.95.70 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 34%: ?

34%

ISP	PT. Indonesia Comnet Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Godean, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.124.95.70

Whois 27.124.95.70

IP Abuse Reports for 27.124.95.70:

This IP address has been reported a total of 14 times from 11 distinct sources. 27.124.95.70 was first reported on April 12th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-07-26 10:00:46 (2 days ago)	2026-07-26 10:00:46 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇮🇩 bps-statistics	2026-07-26 02:26:06 (2 days ago)	Malicious Access	Brute-Force
🇺🇸 RAP	2026-07-25 23:19:41 (3 days ago)	2026-07-25 23:19:41 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-07-25 22:06:33 (3 days ago)	Port Scan Attack proto:TCP src:34216 dst:23	Port Scan
Anonymous	2026-07-25 16:17:10 (3 days ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇮🇩 David Koswari	2026-06-04 05:42:00 (1 month ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 pltcldvlpr	2026-05-28 11:43:42 (2 months ago)	Bogus Useragent: 27.124.95.70 - - [28/May/2026:13:43:42 +0200] "GET /protocol?id=st_5_79&paragraph=1 ... show more Bogus Useragent: 27.124.95.70 - - [28/May/2026:13:43:42 +0200] "GET /protocol?id=st_5_79&paragraph=14489613&seq=2009 HTTP/1.1" 444 0 "-" "Opera/8.16.(Windows NT 11.0; uz-UZ) Presto/2.9.166 Version/12.00" asn=9341 org="PT Indonesia Comnets Plus" country=ID ... show less	Bad Web Bot
🇫🇷 Sklurk	2026-04-04 00:59:40 (3 months ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2026-01-12 02:03:58 (6 months ago)	[Mon Jan 12 09:03:51.290139 2026] [security2:error] [pid 22551:tid 140501612426944] [client 27.124.9 ... show more [Mon Jan 12 09:03:51.290139 2026] [security2:error] [pid 22551:tid 140501612426944] [client 27.124.95.70:58829] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=647%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-4-10-agustus-2015&start=200 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=647%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-4-10-agustus-2015&start=200 Requ..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWRWh_loENMbJqi ... show less	Hacking Web App Attack
Anonymous	2025-11-14 19:59:03 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-10 23:04:52 (9 months ago)	[Sat Oct 11 06:04:19.740025 2025] [security2:error] [pid 1639985:tid 139973398263488] [client 27.124 ... show more [Sat Oct 11 06:04:19.740025 2025] [security2:error] [pid 1639985:tid 139973398263488] [client 27.124.95.70:51613] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=1277%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-20-27-desember-2016&start=100 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=1277%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-20-27-desember-2016&start=1..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOmQ8yJ-ytl0a ... show less	Hacking Web App Attack
🇫🇷 Sklurk	2024-06-03 07:12:38 (2 years ago)	Web App Attack	Web App Attack
🇷🇸 Smel	2024-05-13 10:34:08 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇺🇸 TPI-Abuse	2024-04-12 05:30:05 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 27.124.95.70 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 27.124.95.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 01:29:55.625513 2024] [security2:error] [pid 14007] [client 27.124.95.70:5243] [client 27.124.95.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chickiesbeef.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chickiesbeef.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZhjG0xOsQJcK2ew3g9xDlgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 138.226.239.7

🇮🇳 210.212.136.3

🇫🇷 195.154.59.122

🇲🇽 189.204.230.91

🇺🇸 162.216.149.167

🇺🇸 104.248.218.184

🇮🇩 103.148.113.74

🇫🇷 92.222.108.111

🇩🇪 64.188.83.244

🇬🇧 35.203.210.28

🇬🇧 5.252.83.4

🇺🇸 195.184.76.102

🇬🇧 193.163.125.208

🇧🇷 189.52.52.162

🇷🇺 185.14.4.227

🇨🇳 182.119.130.206

🇺🇦 176.124.234.191

🇺🇸 172.236.228.202

🇺🇸 152.32.207.124

🇺🇸 143.42.1.128