JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

27.34.68.44

Activity Trending Down

Abuse Confidence Score

32% Elevated

38 reports

29 reporters · latest 1 week ago

ISP: WorldLink Communications
Usage Type: Fixed Line ISP
ASN: AS17501
Domain Name: worldlink.com.np
Country: 🇳🇵 Nepal
City: Bharatpur, Bagmati Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

38 from 29 distinct reporters

First reported

March 23rd 2021

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇫🇷 France 2 🇩🇪 Germany 1

Most common categories Web App Attack 6 Bad Web Bot 6 Brute-Force 4 DDoS Attack 2 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-30 04:33:11 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 27.34.68.44 (44.68.34.27.dynamic.wlink.com.np): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:33:05.173179 2026] [security2:error] [pid 1806:tid 1806] [cl ... show more (mod_security) mod_security (id:210350) triggered by 27.34.68.44 (44.68.34.27.dynamic.wlink.com.np): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:33:05.173179 2026] [security2:error] [pid 1806:tid 1806] [client 27.34.68.44:18764] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|photoservicesgroup.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "photoservicesgroup.com"] [uri "/"] [unique_id "auQeAXBSWY-aXiGSj8NvPwAAABw"], referer: https://five.co.in/redirect.php?ref_host=reversedrop.cyou show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-29 09:45:29 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/9438/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL3Nob3BieS9tYW51ZmFjdHVyZXItb3B0b21hLWNoaWVmLXNwZWN0cmFsaW5rLmh0bWw_X19fU0lEPTIyY2UzZmFhM2JjMTk4MDU0MGM3ZDMyN2RhYTZhM2Y3VQ,,/form_key/FhyMdox4T5D164zJ/ \| UA: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/5442-09-18 00:50:10.621902 Firefox/3.8 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-10-16 04:08:33 UTC · (3 weeks ago)	WEB attack	Brute-Force
🇩🇪 LRob	2026-10-06 09:52:29 UTC · (1 month ago)	Shop search flood (L7 DDoS) \| path: /30-meilleur-velo-entre-2000-et-3000-euros \| query: q=Famille-Pro-Prorace-Laufey \| src_port: 44524	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-10-01 14:56:07 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇫🇷 Lunix	2026-09-27 09:05:03 UTC · (1 month ago)		Brute-Force Web App Attack
🇫🇷 Sklurk	2026-09-23 08:45:07 UTC · (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 04:33:59 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 27.34.68.44 (44.68.34.27.dynamic.wlink.com.np): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:33:50.757708 2026] [security2:error] [pid 28598:tid 28630] [ ... show more (mod_security) mod_security (id:210350) triggered by 27.34.68.44 (44.68.34.27.dynamic.wlink.com.np): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:33:50.757708 2026] [security2:error] [pid 28598:tid 28630] [client 27.34.68.44:25011] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|potterpuppetpals.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "potterpuppetpals.com"] [uri "/"] [unique_id "arIFLjIoLBR16bNjvJJ5-gAAAEI"], referer: https://micahmay.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-20 14:38:14 UTC · (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=45&topics%5B2%5D=65&topics%5B3%5D=54&topics%5B4%5D=70 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=45&topics%5B2%5D=65&topics%5B3%5D=54&topics%5B4%5D=70 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-19 14:02:21 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 kosada.com	2026-08-24 22:41:12 UTC · (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:11:54 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 2394 pkts / 3.42 MB to UDP 80/8443 across 395 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised h ... show more UDP flood (DDoS) vs AS215599: 2394 pkts / 3.42 MB to UDP 80/8443 across 395 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:11:54 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 2394 pkts / 3.42 MB to UDP 80/8443 across 395 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised h ... show more UDP flood (DDoS) vs AS215599: 2394 pkts / 3.42 MB to UDP 80/8443 across 395 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 grassau.com	2026-08-09 16:25:59 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 27.34.68.44 (NP/Nepal/Bagmati Province/Kathmandu/44.68.34.27.dynamic.wlink.com.np)	Bad Web Bot
🇺🇸 kosada.com	2026-07-31 14:57:13 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 104.152.52.242

🇺🇸 69.117.125.87

🇹🇼 61.220.235.10

🇺🇸 45.131.193.18

🇺🇸 216.194.92.8

🇧🇪 198.235.24.223

🇹🇷 193.35.153.254

🇳🇱 192.253.248.223

🇨🇴 186.148.180.134

🇵🇰 182.190.223.54

🇺🇸 172.190.112.243

🇺🇸 157.230.138.1

🇺🇸 155.94.213.97

🇷🇺 82.147.85.98

🇺🇸 71.127.199.37

🇺🇸 66.132.195.35

🇺🇸 66.132.159.119

🇺🇸 47.251.124.72

🇧🇬 46.10.209.230

🇺🇸 45.132.227.179