JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.115.124.118

27.115.124.118 was found in our database!

This IP was reported 1,254 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINA UNICOM Shanghai city network
Usage Type	Fixed Line ISP
ASN	AS17621
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.115.124.118

Whois 27.115.124.118

IP Abuse Reports for 27.115.124.118:

This IP address has been reported a total of 1,254 times from 131 distinct sources. 27.115.124.118 was first reported on March 15th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-08-25 20:38:06 (21 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /booru/tags \| UA: Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nodepile	2026-08-25 03:18:18 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/t/1tr022.jpg ua='Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36') show less	Web App Attack Exploited Host
🇪🇸 librebit	2026-08-24 14:10:38 (2 days ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-08-24 02:40:29 (2 days ago)	Web App Attack	Web App Attack
🇮🇩 PENJAGA.AUM	2026-08-23 01:11:14 (3 days ago)	27.115.124.118 - Attack: Possible XSS attack, js event handler	Web App Attack SQL Injection Spoofing
🇵🇱 Budyn	2026-08-22 10:11:09 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.definitelynotahoneypot.xyz \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-22 01:02:09 (4 days ago)	...	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-08-20 05:39:16 (6 days ago)	HTTP application-layer DoS / botnet traffic from 27.115.124.118: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 27.115.124.118: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇵🇱 Budyn	2026-08-19 23:34:17 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.goblinpot.store \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 fortypoundhead	2026-08-19 02:06:30 (1 week ago)	Banned IP Address	Hacking Web App Attack
Anonymous	2026-08-18 09:54:20 (1 week ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇨🇦 Anytech	2026-08-18 08:52:07 (1 week ago)	Blocked by Conn-Monitor: http-bad-user-agent	Web App Attack Bad Web Bot
🇵🇱 Budyn	2026-08-17 21:50:02 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.goblinpot.store \| URI: /.env \| UA: Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-08-17 09:39:54 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/favicon.ico ua='Mozilla/5.0 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/favicon.ico ua='Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.3904.108 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 1gz	2026-08-17 06:16:24 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 1254 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:119:1000:8f8e:eddf:c426:1f4c

🇯🇴 176.241.66.87

🇺🇸 96.232.40.12

🇺🇸 24.234.239.57

🇺🇸 20.171.192.4

🇺🇸 2a03:2880:10ff:7::

🇺🇸 2400:cb00:119:1000:95e6:2b6:dc39:d950

🇵🇰 182.190.217.51

🇷🇺 95.71.125.58

🇺🇸 40.119.40.156

🇩🇪 45.135.194.113

🇺🇸 34.59.5.149

🇿🇦 2c0f:fb50:4001:1::12a

🇫🇷 193.70.43.199

🇺🇸 192.178.7.99

🇩🇪 46.225.57.53

🇺🇸 35.202.148.153

🇺🇸 34.208.72.46

🇺🇸 2400:cb00:119:1000:ae14:ab27:77f1:695c

🇮🇩 202.73.26.211