23.27.145.128
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- EGIHosting
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS18779
- Domain Name
- egihosting.com
- Country
- ๐บ๐ธ United States of America
- City
- San Jose, California
No reports in the last 60 days
23.27.145.128 has been reported 33 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
33 from
13 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐บ๐ธ HamSammich |
Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-07-16T03:02Z).
|
Brute-Force Web App Attack | |
| ๐ญ๐บ kranem |
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 18779 (EGIHosting)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-06-25T23:03:45Z
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0
|
Bad Web Bot | |
| ๐ซ๐ท cityhunter_rhone |
Fail2Ban offender in jail [recidive] โ 1 total attempts โ tracked by mercurius-guide.com security system.
|
SSH Brute-Force | |
| ๐ซ๐ท masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.27.145.128 (US/United States/-): 1 in the last 3600 secs (0-201)
|
Hacking | |
| ๐ซ๐ท masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 23.27.145.128 (US/United States/-): 1 in the last 3600 secs (0-193)
|
Hacking | |
| ๐บ๐ธ xmission.com |
Blocked by UFW (TCP on 443)
Source port: 61624
TTL: 55
Packet length: 60
TOS: 0x00
This report (for 23.27.145.128) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Fuzzing/Looking for credentials files.
|
Brute-Force Web App Attack | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host | |
| Anonymous |
Infected user bad webscan
|
Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown