JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.32.122.27

194.32.122.27 was found in our database!

This IP was reported 470 times. Confidence of Abuse is 37%: ?

37%

ISP	Cyberghost SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61272
Domain Name	cyberghostvpn.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.32.122.27

Whois 194.32.122.27

IP Abuse Reports for 194.32.122.27:

This IP address has been reported a total of 470 times from 99 distinct sources. 194.32.122.27 was first reported on December 28th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Ribeye375	2026-06-16 13:56:15 (6 days ago)	HIPS fake-user-agent - Block tcp/0:65535	Port Scan Bad Web Bot
🇩🇪 IP Analyzer	2026-06-16 13:30:35 (6 days ago)	Unauthorized connection attempt from IP address 194.32.122.27 on Port 465(SMTPS)	Port Scan
🇺🇸 OceanTreasure	2026-06-16 12:30:14 (6 days ago)	tcp/8083; Uncommon admin port 8083 probe (R18) @ 2026-06-16T12:26:16Z	Brute-Force
🇬🇧 ISPLtd	2026-06-09 19:02:13 (1 week ago)	Jun 9 16:02:09 194.32.122.27 TCP SPT=39776 DPT=8983 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=33328 ... show more Jun 9 16:02:09 194.32.122.27 TCP SPT=39776 DPT=8983 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=33328 DPT=11371 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=53588 DPT=8083 SYN ... show less	Port Scan
🇩🇪 Admins@FBN	2026-06-09 18:13:32 (1 week ago)	FW-PortScan: Traffic Blocked srcport=42296 dstport=22	Port Scan Hacking SSH
Anonymous	2026-06-09 17:05:17 (1 week ago)	Jun 9 13:05:06 localhost kernel: [109370009.101441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 9 13:05:06 localhost kernel: [109370009.101441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 9 13:05:06 localhost kernel: [109370009.101451] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 SEQ=710602324 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A8C7B1A200000000001030307) Jun 9 13:05:09 localhost kernel: [109370012.380327] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 SEQ=710602324 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A8C7B26EA0000000001030307) show less	Port Scan
🇺🇸 octageeks.com	2026-04-04 04:47:34 (2 months ago)	Wordpress malicious attack:[octausername]	Web App Attack
Anonymous	2026-01-02 05:32:51 (5 months ago)	2026-01-02T06:32:50.167042+01:00 rendez-vous dovecot[927]: imap-login: Disconnected: Connection clos ... show more 2026-01-02T06:32:50.167042+01:00 rendez-vous dovecot[927]: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=194.32.122.27, lip=*, TLS handshaking: Connection closed, session=<kS9ICmFH6LPCIHob> show less	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-11-04 16:24:03 (7 months ago)	4 port probes: tcp/5600 (enterprise security manager), tcp/8200 (trivnet), tcp/5601 (enterprise secu ... show more 4 port probes: tcp/5600 (enterprise security manager), tcp/8200 (trivnet), tcp/5601 (enterprise security agent), tcp/4567 (tram) [ros] show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-10-25 22:54:56 (7 months ago)	5 port probes: 2x tcp/9090 (websm), tcp/9876 (session director), tcp/9998 (distinct32), tcp/8883 [ro ... show more 5 port probes: 2x tcp/9090 (websm), tcp/9876 (session director), tcp/9998 (distinct32), tcp/8883 [ros] show less	Port Scan
🇺🇸 OceanTreasure	2025-10-25 11:10:04 (7 months ago)	tcp/2375; Multiple SYN connections to closed port (≥10 in 10 min) (R18) @ 2025-10-25T11:08:36Z	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-10-25 09:14:39 (7 months ago)	4 port probes: 2x tcp/4567 (tram), 2x tcp/8282 [ros]	Port Scan
Anonymous	2025-09-24 00:20:56 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-09-01 01:51:10 (9 months ago)	Drop from IP address 194.32.122.27 to tcp-port 8085	Port Scan
🇺🇸 shabi	2025-08-29 04:17:49 (9 months ago)	IP: 194.32.122.27 [Country: LT] triggered WAF (firewallCustom). Action: managed_challenge ASN: 61272 ... show more IP: 194.32.122.27 [Country: LT] triggered WAF (firewallCustom). Action: managed_challenge ASN: 61272 (IST-AS) Protocol: HTTP/1.1 (method GET) Endpoint: /favicon.ico Time: 2025-08-29T01:41:54Z User Agent: Go-http-client/1.1 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 470 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 105.246.242.220

🇨🇳 58.212.237.185

🇸🇬 23.111.14.186

🇳🇱 185.223.235.30

🇨🇳 182.88.191.137

🇫🇷 176.191.43.176

🇺🇸 141.11.88.12

🇨🇳 120.48.100.73

🇭🇰 103.210.21.178

🇮🇩 103.168.135.187

🇦🇺 101.186.147.98

🇻🇳 45.117.177.47

🇿🇦 41.76.230.215

🇨🇳 39.106.61.225

🇨🇳 36.106.166.62

🇮🇳 223.235.97.144

🇨🇳 182.92.217.48

🇺🇸 147.185.132.181

🇨🇳 115.220.2.156

🇧🇬 78.128.114.174