JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.159.75.49

27.159.75.49 was found in our database!

This IP was reported 333 times. Confidence of Abuse is 62%: ?

62%

ISP	CHINANET FUJIAN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Xiamen, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.159.75.49

Whois 27.159.75.49

IP Abuse Reports for 27.159.75.49:

This IP address has been reported a total of 333 times from 88 distinct sources. 27.159.75.49 was first reported on March 25th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-08-16 14:43:26 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (iPhone; C ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1') show less	Web App Attack Exploited Host
🇮🇹 CoreTech srl	2026-08-16 04:28:37 (4 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇺🇸 1gz	2026-08-15 06:57:48 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 10; Mobile; rv:89.0) Gecko/89.0 Firefox/89.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-08-14 16:49:41 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-08-13 14:08:00 (1 week ago)	Multiple Violations by Bot	Port Scan Web App Attack
🇺🇸 drewf.ink	2026-08-08 13:11:53 (1 week ago)	[13:11] Port scanning. Port(s) scanned: TCP/5985	Port Scan
🇨🇦 1gz	2026-08-06 22:18:48 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SX Communications	2026-08-06 14:40:32 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 27.159.75.49: traffic from this add ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 27.159.75.49: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 cwytech	2026-08-04 08:15:43 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇨🇭 flaus	2026-08-04 03:24:47 (2 weeks ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-08-02 06:03:01 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (iPhone; C ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1') show less	Web App Attack Exploited Host
🇫🇷 EvoX	2026-07-28 05:37:57 (3 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP request on 5985	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-07-25 12:56:45 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.7200.1531 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 CoreTech srl	2026-07-25 01:04:07 (3 weeks ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=business-central.it ip=27.159.75.49 richieste=189 r ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=business-central.it ip=27.159.75.49 richieste=189 rischio=ALTO score=12 motivi=molte_richieste,molte_uri_uniche,path_sospetti,enumerazione_id cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇺🇸 drewf.ink	2026-07-24 10:30:24 (3 weeks ago)	[10:30] Port scanning. Port(s) scanned: TCP/5985	Port Scan

Showing 1 to 15 of 333 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 106.251.244.178

🇸🇪 195.178.191.5

🇮🇳 103.242.199.244

🇧🇬 79.124.59.78

🇺🇸 66.132.172.156

🇫🇷 51.254.130.161

🇹🇼 34.80.200.68

🇺🇦 176.104.184.213

🇨🇳 171.108.182.232

🇨🇳 124.239.102.13

🇷🇺 92.39.218.22

🇧🇬 78.128.114.162

🇺🇸 74.244.143.150

🇺🇸 66.57.161.38

🇺🇸 20.12.41.6

🇩🇪 193.124.20.248

🇺🇸 162.216.149.145

🇳🇱 138.226.239.11

🇸🇮 102.220.160.41

🇺🇸 91.193.232.239