JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.27.181.6

3.27.181.6 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 43%: ?

43%

ISP	Amazon Corporate Services Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com
Domain Name	amazon.com.au
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.27.181.6

Whois 3.27.181.6

IP Abuse Reports for 3.27.181.6:

This IP address has been reported a total of 10 times from 6 distinct sources. 3.27.181.6 was first reported on July 24th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 10:39:55 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 06:39:49.789809 2026] [security2:error] [pid 6648:tid 6648] [client 3.27.181.6:60428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maycockfamily.com"] [uri "/.git/config"] [unique_id "amSSdW_4DIdbPHdDbVn4mAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:03:04 (21 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇩🇪 R.G.	2026-07-24 17:23:28 (1 day ago)	(ScanningForFiles) Scanning for files triggerd 3.27.181.6 (AU/Australia/ec2-3-27-181-6.ap-southeast- ... show more (ScanningForFiles) Scanning for files triggerd 3.27.181.6 (AU/Australia/ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 13:22:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:22:16.365125 2026] [security2:error] [pid 3707589:tid 3707589] [client 3.27.181.6:35932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marionenv.com"] [uri "/.git/config"] [unique_id "amNnCIJYp6bjzGxFuRPY1QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 13:06:38 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:00:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:00:22.254097 2026] [security2:error] [pid 691603:tid 691662] [client 3.27.181.6:37270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.biz"] [uri "/.git/config"] [unique_id "amNT1sK_hTaI1t8o_HSiBAAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 06:28:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:28:16.394792 2026] [security2:error] [pid 4097223:tid 4097223] [client 3.27.181.6:43862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariettacaseyclub.org"] [uri "/.git/config"] [unique_id "amMGAKrD6gByq5uy2KPrJwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 06:03:04 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-24 05:17:49 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:21:15 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compu ... show more (mod_security) mod_security (id:210492) triggered by 3.27.181.6 (ec2-3-27-181-6.ap-southeast-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:21:09.733680 2026] [security2:error] [pid 3384941:tid 3384941] [client 3.27.181.6:40358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariarozella.com"] [uri "/.git/config"] [unique_id "amLaJVfxAxAyCcsjOLDCdwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.237.136.213

🇬🇧 172.217.32.17

🇺🇸 172.184.190.240

🇯🇵 150.66.75.135

🇮🇩 103.168.135.187

🇳🇱 91.92.40.19

🇬🇧 2.57.17.87

🇺🇸 216.25.89.104

🇺🇸 192.178.4.105

🇺🇸 172.58.212.55

🇸🇬 103.187.147.214

🇺🇸 68.225.61.156

🇺🇸 68.105.93.177

🇺🇸 45.33.102.61

🇬🇧 35.203.210.219

🇺🇸 34.60.148.45

🇺🇸 23.27.159.176

🇺🇸 216.226.77.20

🇨🇳 123.145.36.135

🇵🇹 81.193.216.17