JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.10.27.142

216.10.27.142 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Code200
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21769
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.10.27.142

Whois 216.10.27.142

IP Abuse Reports for 216.10.27.142:

This IP address has been reported a total of 10 times from 5 distinct sources. 216.10.27.142 was first reported on April 21st 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-16 16:04:29 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 11:04:21.537477 2026] [security2:error] [pid 13640:tid 13640] [client 216.10.27.142:60071] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\windows\\\\win.ini"] [unique_id "aWphhZMk9bnGwgkia7TGRAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 12:59:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 07:59:22.981585 2025] [security2:error] [pid 20128:tid 20128] [client 216.10.27.142:60573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.nbcnewsradio.com"] [uri "/.env.bak"] [unique_id "aRSEqkAdlgzr4MWbbQiT0gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-01 01:04:06 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.10.27.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 21:03:57.444904 2025] [security2:error] [pid 4167009:tid 4167086] [client 216.10.27.142:33449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/wp-config.php.txt"] [unique_id "aLTw_W2-7a0T00elqhIjnQAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 03:01:16 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 06:17:21 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 22:23:22 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2023-07-28 07:11:35 (2 years ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack
🇮🇪 RoboSOC	2023-06-03 04:00:40 (3 years ago)	Microsoft Windows win.ini Access Attempt Detected , PTR: PTR record not found	Hacking
🇮🇪 RoboSOC	2023-04-27 20:40:46 (3 years ago)	Zeroshell Net Services Remote Command Execution Vulnerability, PTR: PTR record not found	Hacking
🇫🇷 Dorian GRANDHAY	2023-04-21 11:21:46 (3 years ago)	216.10.27.142 (US/United States/-), 5 distributed cpanel attacks on account [guest] in the last 3600 ... show more 216.10.27.142 (US/United States/-), 5 distributed cpanel attacks on account [guest] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2023-04-21 13:21:20 +0200] info [webmaild] 113.30.152.233 - guest "GET /backup2.cgi HTTP/1.1" FAILED LOGIN webmaild: invalid webmail user guest (has_cpuser_file failed) [2023-04-21 13:21:43 +0200] info [webmaild] 161.123.151.228 - guest "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" FAILED LOGIN webmaild: invalid webmail user guest (has_cpuser_file failed) 216.10.27.142 - guest [04/21/2023:10:22:34 -0000] "POST" FAILED LOGIN cpdavd: Could not fetch system home directory for guest 157.52.252.36 - guest [04/21/2023:10:22:30 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for guest 161.123.151.133 - guest [04/21/2023:10:25:18 -0000] "GET" FAILED LOGIN cpdavd: Could not fetch system home directory for guest IP Addresses Blocked: 113.30.152.233 (FR/France/-) 161.123.151.228 (US/United States/-) show less	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.195.26

🇳🇱 45.148.10.230

🇨🇳 210.13.84.84

🇳🇱 188.166.27.115

🇲🇰 188.44.20.33

🇩🇪 172.217.33.212

🇩🇪 93.253.62.236

🇺🇸 20.65.194.84

🇷🇴 2.57.122.177

🇬🇧 194.50.235.158

🇨🇳 42.180.4.166

🇺🇸 172.245.102.2

🇺🇸 67.207.84.8

🇺🇸 2607:f8b0:4001:c24::12e

🇮🇳 2404:6800:4000:100e::125

🇳🇱 85.121.127.139

🇺🇸 66.132.172.234

🇨🇳 60.220.241.50

🇷🇴 2.57.121.25

🇩🇪 213.209.159.225