JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.124.24.138

27.124.24.138 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 93%: ?

93%

ISP	CTG Server Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS152194
Domain Name	ctgserver.com
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.124.24.138

Whois 27.124.24.138

IP Abuse Reports for 27.124.24.138:

This IP address has been reported a total of 89 times from 19 distinct sources. 27.124.24.138 was first reported on July 8th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 decode5921	2026-07-03 05:45:02 (1 hour ago)	Honeypot hit (honeypot:wp) — probed a non-existent bait path on a site that does not run that softwa ... show more Honeypot hit (honeypot:wp) — probed a non-existent bait path on a site that does not run that software. show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 05:32:21 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:32:07.802341 2026] [security2:error] [pid 27722:tid 27722] [client 27.124.24.138:44350] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|evolute.io\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "evolute.io"] [uri "/wp-json/wp/v2/users"] [unique_id "akdJV9CyGCZ1Jq4FfoPurAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-03 02:41:00 (4 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:35:24 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:35:10.846310 2026] [security2:error] [pid 4006:tid 4006] [client 27.124.24.138:33190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|georgegourmet.visionremota.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgegourmet.visionremota.info"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akcf3hxEZxV0YbTEWUFslQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 solution.it	2026-07-03 02:31:02 (4 hours ago)	[Fri Jul 03 04:31:01.390498 2026] [php7:error] [pid 543381:tid 543381] [client 27.124.24.138:55764] ... show more [Fri Jul 03 04:31:01.390498 2026] [php7:error] [pid 543381:tid 543381] [client 27.124.24.138:55764] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-03 02:21:03 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-03 01:47:22 (5 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇨🇭 Peter-Johann Sarbach	2026-07-02 04:22:45 (1 day ago)	Hacking website	Hacking
🇲🇽 octageeks.com	2026-07-02 04:08:44 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-01 07:55:40 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇨🇿 ptlab	2026-07-01 06:45:08 (2 days ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-07-01 05:50:06 (2 days ago)	Wordfence waf block on 1105merrystreet	Web App Attack
🇨🇦 1gz	2026-07-01 05:26:20 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-01 05:15:44 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 27.124.24.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:15:27.515656 2026] [security2:error] [pid 18952:tid 18952] [client 27.124.24.138:44288] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|blacktieokc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blacktieokc.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akSib9dKxwKtCq_QdvTGWQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 spamverify.com	2026-07-01 05:06:23 (2 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.177.72.54

🇺🇸 104.232.79.58

🇲🇾 47.254.231.20

🇸🇬 47.82.50.228

🇺🇸 173.255.221.6

🇺🇸 162.216.149.168

🇦🇹 152.53.111.131

🇳🇱 91.92.40.233

🇸🇬 47.82.55.60

🇸🇬 47.82.50.90

🇳🇱 45.148.10.152

🇩🇪 44.144.172.145

🇬🇧 35.203.210.246

🇻🇳 27.79.43.219

🇳🇱 195.178.110.239

🇸🇬 166.108.228.76

🇺🇸 154.83.197.148

🇫🇮 147.185.133.127

🇫🇮 147.185.133.94

🇨🇳 106.13.4.214