JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.27.12.249

2.27.12.249 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 30%: ?

30%

ISP	NODE HOST LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198550
Domain Name	nodehost.ru
Country	🇳🇱 Netherlands
City	Hopel, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.27.12.249

Whois 2.27.12.249

IP Abuse Reports for 2.27.12.249:

This IP address has been reported a total of 30 times from 16 distinct sources. 2.27.12.249 was first reported on April 21st 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-04-30 03:13:18 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /d ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /dnscfg.cgi?action=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-28 03:13:14 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /d ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /dnscfg.cgi?action=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-27 03:09:51 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:54 -0300] "GET /cgi-bin/luci/admin/system?cmd=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-25 03:09:47 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:54 -0300] "GET /cgi-bin/luci/admin/system?cmd=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
🇦🇹 urnilxfgbez	2026-04-23 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 Peregrine	2026-04-23 16:20:05 (1 month ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:53 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 414 - 2.27.12.249 - - [23/Apr/2026:13:19:54 -0300] "GET /cgi-bin/luci/admin/system?cmd=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 TM	2026-04-23 15:55:00 (1 month ago)	get /dnscfg.cgi?action%3D;id;	Web App Attack Hacking
🇧🇷 Peregrine	2026-04-23 15:35:12 (1 month ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:35:06 -0300] "POS ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:35:06 -0300] "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 dominioz	2026-04-23 15:17:34 (1 month ago)	2026-04-23 15:17:02 POST /cgi-bin/cstecgi.cgi - - 2.27.12.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0; ... show more 2026-04-23 15:17:02 POST /cgi-bin/cstecgi.cgi - - 2.27.12.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 404 1440 2026-04-23 15:17:02 GET /dnscfg.cgi action=;id; - 2.27.12.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 404 1440 2026-04-23 15:17:02 POST /cgi-bin/cstecgi.cgi - - 2.27.12.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 404 1440 2026-04-23 15:17:02 GET /cgi-bin/luci/admin/system cmd=;id; - 2.27.12.249 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36 - 404 1440 ... show less	Web App Attack
🇧🇷 SOC PR	2026-04-23 15:12:05 (1 month ago)	IPS: Port Scan.	Port Scan
🇧🇷 Peregrine	2026-04-23 15:11:08 (1 month ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /d ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 2.27.12.249 - - [23/Apr/2026:12:10:59 -0300] "GET /dnscfg.cgi?action=;id; HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-04-23 15:10:01 (1 month ago)	suspicious request in access.log	Web App Attack
🇫🇷 security.rdmc.fr	2026-04-23 11:47:55 (1 month ago)	Port Scan Attack proto:TCP src:41902 dst:23	Port Scan
Anonymous	2026-04-23 11:39:01 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-04-23 11:09:44 (1 month ago)	tcp/5555 (2 or more attempts)	Port Scan

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2404:6800:4005:c08::120

🇨🇳 223.88.35.85

🇧🇴 190.181.4.12

🇨🇳 171.105.76.2

🇦🇺 149.118.68.211

🇨🇳 106.13.182.16

🇺🇸 100.49.117.77

🇨🇭 81.62.135.233

🇺🇸 34.50.171.235

🇰🇷 1.250.67.190

🇧🇷 177.6.162.182

🇺🇸 174.174.123.32

🇺🇸 44.232.252.23

🇻🇳 222.255.180.246

🇺🇸 162.216.149.247

🇫🇷 82.102.18.116

🇫🇷 62.171.164.56

🇨🇳 61.51.111.26

🇺🇸 43.153.32.5

🇻🇳 42.116.247.236