JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.32.122.27

194.32.122.27 was found in our database!

This IP was reported 467 times. Confidence of Abuse is 24%: ?

24%

ISP	Cyberghost SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61272
Domain Name	cyberghostvpn.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.32.122.27

Whois 194.32.122.27

IP Abuse Reports for 194.32.122.27:

This IP address has been reported a total of 467 times from 97 distinct sources. 194.32.122.27 was first reported on December 28th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 ISPLtd	2026-06-09 19:02:13 (6 days ago)	Jun 9 16:02:09 194.32.122.27 TCP SPT=39776 DPT=8983 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=33328 ... show more Jun 9 16:02:09 194.32.122.27 TCP SPT=39776 DPT=8983 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=33328 DPT=11371 SYN Jun 9 16:02:09 194.32.122.27 TCP SPT=53588 DPT=8083 SYN ... show less	Port Scan
🇩🇪 Admins@FBN	2026-06-09 18:13:32 (6 days ago)	FW-PortScan: Traffic Blocked srcport=42296 dstport=22	Port Scan Hacking SSH
Anonymous	2026-06-09 17:05:17 (6 days ago)	Jun 9 13:05:06 localhost kernel: [109370009.101441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 9 13:05:06 localhost kernel: [109370009.101441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 9 13:05:06 localhost kernel: [109370009.101451] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 SEQ=710602324 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A8C7B1A200000000001030307) Jun 9 13:05:09 localhost kernel: [109370012.380327] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=194.32.122.27 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=42992 DPT=8200 SEQ=710602324 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A8C7B26EA0000000001030307) show less	Port Scan
🇺🇸 octageeks.com	2026-04-04 04:47:34 (2 months ago)	Wordpress malicious attack:[octausername]	Web App Attack
Anonymous	2026-01-02 05:32:51 (5 months ago)	2026-01-02T06:32:50.167042+01:00 rendez-vous dovecot[927]: imap-login: Disconnected: Connection clos ... show more 2026-01-02T06:32:50.167042+01:00 rendez-vous dovecot[927]: imap-login: Disconnected: Connection closed (no auth attempts in 3 secs): user=<>, rip=194.32.122.27, lip=*, TLS handshaking: Connection closed, session=<kS9ICmFH6LPCIHob> show less	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-11-04 16:24:03 (7 months ago)	4 port probes: tcp/5600 (enterprise security manager), tcp/8200 (trivnet), tcp/5601 (enterprise secu ... show more 4 port probes: tcp/5600 (enterprise security manager), tcp/8200 (trivnet), tcp/5601 (enterprise security agent), tcp/4567 (tram) [ros] show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-10-25 22:54:56 (7 months ago)	5 port probes: 2x tcp/9090 (websm), tcp/9876 (session director), tcp/9998 (distinct32), tcp/8883 [ro ... show more 5 port probes: 2x tcp/9090 (websm), tcp/9876 (session director), tcp/9998 (distinct32), tcp/8883 [ros] show less	Port Scan
🇺🇸 OceanTreasure	2025-10-25 11:10:04 (7 months ago)	tcp/2375; Multiple SYN connections to closed port (≥10 in 10 min) (R18) @ 2025-10-25T11:08:36Z	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-10-25 09:14:39 (7 months ago)	4 port probes: 2x tcp/4567 (tram), 2x tcp/8282 [ros]	Port Scan
Anonymous	2025-09-24 00:20:56 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-09-01 01:51:10 (9 months ago)	Drop from IP address 194.32.122.27 to tcp-port 8085	Port Scan
🇺🇸 shabi	2025-08-29 04:17:49 (9 months ago)	IP: 194.32.122.27 [Country: LT] triggered WAF (firewallCustom). Action: managed_challenge ASN: 61272 ... show more IP: 194.32.122.27 [Country: LT] triggered WAF (firewallCustom). Action: managed_challenge ASN: 61272 (IST-AS) Protocol: HTTP/1.1 (method GET) Endpoint: /favicon.ico Time: 2025-08-29T01:41:54Z User Agent: Go-http-client/1.1 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-08-26 01:17:26 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 Burayot	2025-08-16 07:18:38 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.32.122.27 (LT/Lithuania/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 194.32.122.27 (LT/Lithuania/-): 1 in the last 3600 secs show less	Web App Attack
🇰🇷 forgeban	2025-07-22 12:27:45 (10 months ago)	Honeypot hit: HTTP/1.1 request on 5601 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 5601 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Accept-Encoding: gzip; 5601 [1], 5600 [1] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 467 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 104.222.173.103

🇫🇷 91.231.89.229

🇹🇼 60.199.224.55

🇪🇨 205.235.2.176

🇺🇸 195.184.76.90

🇵🇱 194.180.48.148

🇦🇷 186.122.177.140

🇺🇸 172.253.251.124

🇸🇪 104.222.171.232

🇸🇪 104.222.169.193

🇫🇷 85.217.140.34

🇫🇷 85.217.140.2

🇨🇳 219.144.80.143

🇷🇺 193.17.92.5

🇨🇳 182.116.114.54

🇧🇷 179.189.85.66

🇳🇱 176.65.139.220

🇮🇳 117.248.107.130

🇺🇸 104.209.11.52

🇺🇸 104.194.192.60