JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.42.27.117

209.42.27.117 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	WHG Hosting Services Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS204800
Hostname(s)	s4507.sgp1.stableserver.net
Domain Name	hosting.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.42.27.117

Whois 209.42.27.117

IP Abuse Reports for 209.42.27.117:

This IP address has been reported a total of 49 times from 35 distinct sources. 209.42.27.117 was first reported on April 2nd 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 05:55:34 (9 hours ago)	(mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:55:28.391748 2026] [security2:error] [pid 382:tid 382] [client 209.42.27.117:46408] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|stalbansparish.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stalbansparish.org"] [uri "/wp-json/wp/v2/users"] [unique_id "apZo0PIhO-14STvaULbhdwAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-01 05:15:00 (10 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 tecnicorioja	2026-08-31 22:00:55 (17 hours ago)	wp-login attack [31/Aug/2026:17:52:28	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-31 19:54:34 (19 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
Anonymous	2026-08-31 19:54:15 (19 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 VHosting	2026-08-31 15:35:03 (23 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 12:09:04 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:08:59.932779 2026] [security2:error] [pid 25785:tid 25785] [client 209.42.27.117:45222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|danielbrower.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danielbrower.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVu292GDp1q7WxvMnwWLwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-31 09:31:33 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇲🇽 octageeks.com	2026-08-31 04:07:46 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇮 JimArchon72	2026-08-30 23:45:01 (1 day ago)	2026/08/30 23:40:16 "GET /wp-login.php HTTP/2.0"	Web App Attack
🇮🇹 CoreTech srl	2026-08-30 20:38:56 (1 day ago)	cloudlinux2 fail2ban: 2026-08-30 22:34:05,902 fail2ban.filter [1459]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-30 22:34:05,902 fail2ban.filter [1459]: INFO [plesk-wordpress] Found 209.42.27.117 - 2026-08-30 22:34:05cloudlinux2 fail2ban: 2026-08-30 22:34:18,639 fail2ban.filter [1459]: INFO [plesk-wordpress] Found 52.207.72.18 - 2026-08-30 22:34:18cloudlinux2 fail2ban: 2026-08-30 22:36:48,379 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 106.215.151.30 - 2026-08-30 22:36:48cloudlinux2 fail2ban: 2026-08-30 22:36:44,686 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 18.220.71.225 - 2026-08-30 22:36:44cloudlinux2 fail2ban: 2026-08-30 22:38:01,577 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 177.241.60.37 - 2026-08-30 22:38:01cloudlinux2 fail2ban: 2026-08-30 22:38:15,106 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 106.215.151.30 - 2026-08-30 22:38:15cloudlinux2 fail2ban: 2026-08-30 22:38:31,851 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.23.225.57 - 2026-08-30 22:38: show less	Web App Attack
🇩🇪 Hazzard	2026-08-30 18:25:33 (1 day ago)	(wordpress) Failed wordpress login from 209.42.27.117 (GB/United Kingdom/Tower Hamlets/Canary Wharf/ ... show more (wordpress) Failed wordpress login from 209.42.27.117 (GB/United Kingdom/Tower Hamlets/Canary Wharf/s4507.sgp1.stableserver.net/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-30 16:52:16 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 12:52:09.248795 2026] [security2:error] [pid 24271:tid 24271] [client 209.42.27.117:46670] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nwtree.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nwtree.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apRfuf2hBvyLpVXE5WZ0AQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-30 13:30:10 (2 days ago)	[30/Aug/2026:16:30:09 +0300] -- 209.42.27.117 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-j ... show more [30/Aug/2026:16:30:09 +0300] -- 209.42.27.117 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-json/mepr/v1/members HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 02:55:27 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 209.42.27.117 (s4507.sgp1.stableserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:55:18.951481 2026] [security2:error] [pid 14853:tid 14853] [client 209.42.27.117:45038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.thepotteriesmesilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thepotteriesmesilla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apOblkAdzbXj9dAQKd7tZgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.121.147.125

🇹🇼 61.230.27.162

🇨🇦 45.194.92.14

🇬🇧 193.163.125.105

🇲🇽 187.192.86.212

🇪🇸 170.168.97.111

🇨🇦 137.184.165.71

🇺🇸 91.230.168.27

🇪🇸 90.166.156.78

🇳🇱 45.148.10.157

🇳🇱 45.148.10.151

🇺🇸 3.82.139.248

🇭🇰 2404:6800:4005:c01::125

🇪🇹 196.188.187.21

🇳🇱 193.47.62.69

🇧🇷 191.37.76.156

🇺🇸 170.101.96.76

🇲🇳 66.181.179.140

🇱🇻 62.60.130.242

🇺🇦 195.211.215.137