JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.228.27

91.242.228.27 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.228.27

Whois 91.242.228.27

IP Abuse Reports for 91.242.228.27:

This IP address has been reported a total of 17 times from 12 distinct sources. 91.242.228.27 was first reported on January 15th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2025-11-26 12:49:07 (6 months ago)	jow-Joomla User : try to access forms...	Hacking
🇨🇭 backslash	2025-11-17 14:20:05 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2025-11-16 22:37:01 (6 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 15:43:29 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 10:43:21.202218 2025] [security2:error] [pid 11326:tid 11326] [client 91.242.228.27:43165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|esmital.cl\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "esmital.cl"] [uri "/cgi-bin"] [unique_id "aRNZmeXfv7BiaFew08T1ywAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-11-07 10:45:52 (7 months ago)	ABV: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-11-03 01:20:51 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2025-11-01 13:00:33 (7 months ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
Anonymous	2025-10-26 14:05:45 (7 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2025-10-22 03:39:48 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 23:39:42.714871 2025] [security2:error] [pid 24679:tid 24679] [client 91.242.228.27:31805] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.belgiophar.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.belgiophar.com"] [uri "/"] [unique_id "aPhR_k-OnoAsAWswkw2TtgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-20 07:10:51 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 91.242.228.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 03:10:45.337243 2025] [security2:error] [pid 5815:tid 5815] [client 91.242.228.27:15669] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|graner.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "graner.us"] [uri "/"] [unique_id "aPXgddbEi4Ad_xCfI7TH9wAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-17 22:58:21 (8 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-09-11 13:51:01 (8 months ago)	wordpress-trap	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2025-08-29 23:00:59 (9 months ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇲🇽 licjperezl	2025-06-10 19:13:32 (11 months ago)	Ataque de diccionario o DDoS en nuestros servicios en linea	Brute-Force
🇨🇦 wil.com	2025-06-07 21:22:16 (11 months ago)	GlobalProtect login attempts with user dwells.	VPN IP Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.183.94.132

🇺🇸 104.168.37.133

🇺🇸 78.153.155.152

🇰🇷 222.239.251.12

🇩🇿 105.102.200.16

🇷🇺 91.211.236.106

🇸🇪 81.229.41.66

🇫🇮 77.42.68.88

🇱🇹 37.0.147.158

🇬🇧 35.203.211.222

🇺🇸 24.199.101.7

🇺🇸 2604:a880:400:d1:0:4:8bf6:d001

🇳🇱 195.178.110.30

🇨🇴 181.48.154.10

🇱🇾 154.127.68.64

🇵🇱 109.173.244.87

🇺🇸 104.248.218.184

🇩🇪 43.228.157.69

🇻🇳 36.50.177.171

🇩🇪 176.65.132.129