2.27.123.2

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
89% Critical
16 reports
16 reporters · latest 21 hours ago
ISP
IT-Garage
Usage Type
Data Center/Web Hosting/Transit
ASN
AS206134
Domain Name
it-garage.pro
Country
🇫🇮 Finland
City
Helsinki, Uusimaa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 5 🇺🇸 United States of America 4
Most common categories Port Scan 8 Web App Attack 6 Bad Web Bot 4 Hacking 2 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 its101
Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare.
Web App Attack
🇩🇪 janbro
TCP SYN port scan detected and source banned by Fail2Ban
Port Scan
🇫🇷 security.rdmc.fr
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack Bad Web Bot
Anonymous
automatically banned
Brute-Force Web App Attack
Anonymous
Triggered: repeated knocking on closed ports.
Port Scan
🇺🇸 jcbriar
Searching for vulnerable scripts
Hacking Web App Attack
Anonymous
*Port Scan* detected from 2.27.123.2 (FI/Finland/Uusimaa/Helsinki/-/[redacted]).
Port Scan
🇫🇷 vtchost.com
known bad web user agent ...
Bad Web Bot
🇫🇷 uthul
T-Pot honeypot: 23 hits on ports [2375, 9200] (automated)
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/6379 (Redis); 6 application-level events across 2 source port(s). Sensor(s): Redishoneypot.
Port Scan
🇩🇪 ddobko
Bad Web Bot Web App Attack
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 3 observed events targeting REDISHONEYPOT/6379.
Port Scan
🇺🇸 heyzg
SSH Payload Download Commands (observed): 17 cmds, 3.8m
Hacking Exploited Host SSH
🇩🇪 _ArminS_
WEB-Scan 55464:80 detected 2026.11.09 11:08:29 blocked until 2026.12.29 04:11:16
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Excessive port scans. -151302cd-
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 78.153.140.235
🇺🇸 66.132.195.21
🇳🇱 45.148.10.141
🇺🇸 40.119.41.124
🇳🇱 34.12.154.175
🇷🇴 2.57.121.25
🇮🇳 203.145.143.181
🇿🇦 197.184.170.255
🇳🇱 185.223.235.33
🇸🇬 157.245.148.90
🇺🇸 104.223.101.213
🇹🇷 88.225.215.108
🇺🇸 40.119.27.191
🇺🇸 40.119.27.187
🇫🇮 216.40.75.99
🇳🇱 195.178.110.30
🇫🇷 104.164.22.205
🇧🇬 79.124.59.78
🇳🇱 45.148.10.233
🇦🇺 45.133.6.156
feedback