JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.115.124.38

27.115.124.38 was found in our database!

This IP was reported 2,285 times. Confidence of Abuse is 89%: ?

89%

ISP	CHINA UNICOM Shanghai city network
Usage Type	Fixed Line ISP
ASN	AS17621
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.115.124.38

Whois 27.115.124.38

IP Abuse Reports for 27.115.124.38:

This IP address has been reported a total of 2,285 times from 224 distinct sources. 27.115.124.38 was first reported on December 24th 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-25 03:32:20 (1 day ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-08-24 07:46:33 (2 days ago)	Web App Attack	Web App Attack
🇵🇱 Budyn	2026-08-22 10:10:18 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 nodepile	2026-08-21 11:50:24 (5 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/0bc7e8298c705bb0d1bb16a5dfbdb6bc/1/v/1v3526.jpg ua='Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36') show less	Web App Attack Exploited Host
🇪🇸 librebit	2026-08-21 02:28:39 (5 days ago)	Brute force	Brute-Force
🇵🇱 Budyn	2026-08-19 22:44:30 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.teddypot.store \| URI: /backup.sql \| UA: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Phenix Info	2026-08-19 12:55:02 (1 week ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
Anonymous	2026-08-18 09:54:20 (1 week ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇦🇺 FireGuard Server	2026-08-18 01:45:07 (1 week ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443	Port Scan Hacking
🇮🇪 Coolnagour	2026-08-18 01:10:44 (1 week ago)	bot entered honeypot	Web App Attack
🇵🇱 Budyn	2026-08-18 00:33:25 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.goblinpot.store \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-08-17 13:59:46 (1 week ago)	Brute force	Brute-Force
🇺🇸 1gz	2026-08-17 05:55:04 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.79 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 primal	2026-08-15 15:24:08 (1 week ago)	Automated attack traffic against a WordPress site: automated bot traffic, failed JavaScript challeng ... show more Automated attack traffic against a WordPress site: automated bot traffic, failed JavaScript challenge at CDN edge (1x). Blocked by CDN/WAF/application security layers. Total 1 hits in last 30 days. show less	Bad Web Bot
🇺🇸 nodepile	2026-08-14 10:38:55 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Linux; An ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36') show less	Web App Attack Exploited Host

Showing 1 to 15 of 2285 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.177.70.53

🇺🇸 45.156.129.122

192.168.164.62

100.127.242.152

🇨🇳 223.64.48.190

🇳🇱 195.178.110.228

100.117.5.7

🇺🇸 66.132.172.98

🇺🇸 34.138.176.132

10.80.74.233

🇱🇹 2a00:f502:174:d5b8:5c20:487c:a45:6c6a

🇫🇷 172.71.119.58

🇫🇷 172.71.119.57

100.103.197.88

🇨🇦 99.217.11.91

🇬🇧 45.133.173.44

🇭🇰 39.109.122.90

🇹🇷 195.155.132.118

🇳🇱 158.94.210.205

🇫🇷 141.101.68.243