JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.42.88.52

27.42.88.52 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS17816
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.42.88.52

Whois 27.42.88.52

IP Abuse Reports for 27.42.88.52:

This IP address has been reported a total of 11 times from 4 distinct sources. 27.42.88.52 was first reported on June 30th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-02 08:21:04 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:20:57.349755 2026] [security2:error] [pid 8903:tid 8903] [client 27.42.88.52:3609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.montymilburn.com"] [uri "/.git/config"] [unique_id "akYfaXhJ1Abwi5Ml9rfaCQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 07:22:06 (6 hours ago)	Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted ... show more Automated vulnerability scanning and sensitive file probing against a secured web server. Attempted access to sensitive configuration files and common vulnerability paths. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 02:26:38 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:26:30.827584 2026] [security2:error] [pid 22218:tid 22218] [client 27.42.88.52:5965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.persnicketyinc.com"] [uri "/.git/config"] [unique_id "akXMVnVLRVLVR7G4mQhABQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-01 10:53:33 (1 day ago)	Web vulnerability probing: /.env.production	Web App Attack
🇺🇸 Matthew Ping	2026-07-01 04:00:02 (1 day ago)	ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-01 01:16:15 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 21:16:09.090474 2026] [security2:error] [pid 13100:tid 13100] [client 27.42.88.52:4201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boulevardflowergardens.com"] [uri "/.git/config"] [unique_id "akRqWdt83cHpHaQvtxvwVwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 00:38:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 20:38:39.210952 2026] [security2:error] [pid 28863:tid 28863] [client 27.42.88.52:3920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ypsisda.net"] [uri "/.git/config"] [unique_id "akRhj_95I2rYDKBlRiIL1wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 23:51:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 19:51:44.248285 2026] [security2:error] [pid 10348:tid 10348] [client 27.42.88.52:3690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kipdollar.tobyjohnson.com"] [uri "/.git/config"] [unique_id "akRWkJ5FacZm3ERfDHtyXAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 17:08:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 13:08:50.693217 2026] [security2:error] [pid 8511:tid 8511] [client 27.42.88.52:3886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonworkshopwest.com"] [uri "/.git/config"] [unique_id "akP4Ip5KzNZsuMKc6mggZQAAAGA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 13:06:27 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 09:06:20.728700 2026] [security2:error] [pid 26019:tid 26019] [client 27.42.88.52:5655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.satanisdead.com"] [uri "/.git/config"] [unique_id "akO_TLCytGf_cvPyQfbqGwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 12:49:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 27.42.88.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:49:45.779171 2026] [security2:error] [pid 22677:tid 22677] [client 27.42.88.52:4215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabbathseminars.net"] [uri "/.git/config"] [unique_id "akO7acOwK0XLIFuIDoRWfwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 200.10.43.91

🇨🇦 165.22.225.218

🇺🇸 103.234.62.69

🇺🇸 91.230.168.147

🇳🇱 81.19.216.112

🇧🇷 20.226.36.195

🇧🇷 200.219.200.16

🇦🇷 186.22.253.140

🇧🇷 179.108.33.237

🇺🇸 161.115.234.176

🇺🇸 107.150.101.102

🇸🇬 101.32.240.31

🇩🇪 69.5.169.158

🇻🇳 14.191.161.23

🇺🇸 191.102.163.97

🇳🇱 185.93.89.79

🇨🇦 140.238.153.39

🇩🇪 128.1.123.228

🇧🇩 103.59.178.237

🇷🇺 82.204.185.138