This IP address has been reported a total of
132
times from
56 distinct
sources.
120.27.138.98 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 42 port scanning attempts on 26-07-2026. For more information or to repo ...
show moreThis IP address carried out 42 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-05-03T04:44:56.257722+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76392]: Invalid user esuser ...
show more2026-05-03T04:44:56.257722+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76392]: Invalid user esuser from 120.27.138.98 port 40340
2026-05-03T04:44:56.525699+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76394]: Invalid user elastic from 120.27.138.98 port 40652
2026-05-03T04:44:56.784725+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76396]: Invalid user www from 120.27.138.98 port 40858
2026-05-03T04:44:57.055474+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76398]: Invalid user student from 120.27.138.98 port 41080
2026-05-03T04:44:57.317985+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[76400]: Invalid user pi from 120.27.138.98 port 41308
...
show less
2026-05-02T22:01:42.549640+02:00 server sshd-session[303519]: pam_unix(sshd:auth): authentication fa ...
show more2026-05-02T22:01:42.549640+02:00 server sshd-session[303519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98
2026-05-02T22:01:44.203744+02:00 server sshd-session[303519]: Failed password for invalid user esuser from 120.27.138.98 port 34618 ssh2
2026-05-02T22:01:45.853608+02:00 server sshd-session[303521]: Invalid user elastic from 120.27.138.98 port 37586
show less
2026-05-02T18:41:49.985660+00:00 vultr sshd[1581882]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-05-02T18:41:49.985660+00:00 vultr sshd[1581882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98
2026-05-02T18:41:51.736429+00:00 vultr sshd[1581882]: Failed password for invalid user esuser from 120.27.138.98 port 33844 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-05-02T12:48:29.318405 SPARTAN sshd[3077]: Invalid user ubuntu from 120.27.138.98 port 57352
202 ...
show more2026-05-02T12:48:29.318405 SPARTAN sshd[3077]: Invalid user ubuntu from 120.27.138.98 port 57352
2026-05-02T12:48:30.186963 SPARTAN sshd[3077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98
2026-05-02T12:48:31.887794 SPARTAN sshd[3077]: Failed password for invalid user ubuntu from 120.27.138.98 port 57352 ssh2
2026-05-02T12:48:34.189650 SPARTAN sshd[3084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98 user=root
2026-05-02T12:48:36.438812 SPARTAN sshd[3084]: Failed password for root from 120.27.138.98 port 35688 ssh2
...
show less
May 2 16:55:41 box sshd[3818030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreMay 2 16:55:41 box sshd[3818030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98
May 2 16:55:43 box sshd[3818030]: Failed password for invalid user devopsadmin from 120.27.138.98 port 58664 ssh2
May 2 16:55:47 box sshd[3818089]: Invalid user vps from 120.27.138.98 port 38858
May 2 16:55:47 box sshd[3818089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98
May 2 16:55:48 box sshd[3818089]: Failed password for invalid user vps from 120.27.138.98 port 38858 ssh2
May 2 16:55:54 box sshd[3818133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.138.98 user=root
May 2 16:55:56 box sshd[3818133]: Failed password for root from 120.27.138.98 port 46424 ssh2
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
Showing 1 to
15
of 132 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩