JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.27.219.138

120.27.219.138 was found in our database!

This IP was reported 632 times. Confidence of Abuse is 42%: ?

42%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.27.219.138

Whois 120.27.219.138

IP Abuse Reports for 120.27.219.138:

This IP address has been reported a total of 632 times from 150 distinct sources. 120.27.219.138 was first reported on October 18th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-14 22:02:27 (1 month ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.27.219.138 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.27.219.138 2026-05-14 04:05:23 ["uname -s -m"] show less	Brute-Force
🇨🇳 ThreatBook.io	2026-05-13 22:12:08 (1 month ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.27.219.138 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.27.219.138 2026-05-13 20:59:44 ["uname -s -m"] 2026-05-13 12:02:23 ["uname -s -m"] show less	SSH
🇮🇹 lavocedelsavuto.it	2026-05-13 21:51:50 (1 month ago)	2026-05-13T23:51:37.824797+02:00 Server sshd[1178583]: Failed password for root from 120.27.219.138 ... show more 2026-05-13T23:51:37.824797+02:00 Server sshd[1178583]: Failed password for root from 120.27.219.138 port 55090 ssh2 2026-05-13T23:51:41.461849+02:00 Server sshd[1178694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.219.138 user=root 2026-05-13T23:51:43.837378+02:00 Server sshd[1178694]: Failed password for root from 120.27.219.138 port 42302 ssh2 2026-05-13T23:51:46.766541+02:00 Server sshd[1178752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.219.138 user=root 2026-05-13T23:51:49.161878+02:00 Server sshd[1178752]: Failed password for root from 120.27.219.138 port 40962 ssh2 ... show less	Brute-Force SSH
🇨🇦 Slackin' Jack	2026-05-13 12:54:15 (1 month ago)	Triggered honeypot on port 2002. (120.27.219.138)	Port Scan
🇭🇺 simrol	2026-05-13 00:00:13 (1 month ago)	Automated report from vps-201 - Batch job Wed May 13 00:00:11 UTC 2026	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-12 22:02:04 (1 month ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.27.219.138	Brute-Force
🇨🇿 tjiricek	2026-05-12 16:29:55 (1 month ago)	2026-05-12T17:29:50.750706+01:00 raspberrypi sshd[2877961]: pam_unix(sshd:auth): authentication fail ... show more 2026-05-12T17:29:50.750706+01:00 raspberrypi sshd[2877961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.219.138 user=root 2026-05-12T17:29:52.847530+01:00 raspberrypi sshd[2877961]: Failed password for root from 120.27.219.138 port 39138 ssh2 ... show less	Brute-Force SSH
🇭🇺 simrol	2026-05-12 08:03:29 (1 month ago)	2026-05-12T08:03:26.707785+00:00 vps-201 sshd[4001153]: pam_unix(sshd:auth): authentication failure; ... show more 2026-05-12T08:03:26.707785+00:00 vps-201 sshd[4001153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.27.219.138 user=root 2026-05-12T08:03:28.608545+00:00 vps-201 sshd[4001153]: Failed password for root from 120.27.219.138 port 56114 ssh2 ... show less	Brute-Force SSH
🇺🇸 donarev419	2026-05-12 04:30:41 (1 month ago)	Port scan detected on port 2000 (connection without data transfer)	Port Scan
🇩🇪 femboy.cat	2026-05-12 00:57:00 (1 month ago)	Port scan to tcp/1002 from 120.27.219.138	Brute-Force
🇦🇺 LiftUp Hosting	2026-05-11 21:16:02 (1 month ago)	Honeypot hit: Empty payload (likely service probe); 6022 [1] TCP	Port Scan
🇺🇸 anon333	2026-05-11 16:33:15 (1 month ago)	Hacker syslog review 1778517195	Hacking
🇳🇱 donarev419	2026-05-11 06:45:39 (1 month ago)	Port scan detected on port 2222 (connection without data transfer)	Port Scan
🇮🇳 Parth Maniar	2026-05-11 06:40:22 (1 month ago)	This IP address carried out 23 port scanning attempts on 10-05-2026. For more information or to repo ... show more This IP address carried out 23 port scanning attempts on 10-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2026-05-11 06:09:18 (1 month ago)	This IP address carried out 5 SSH credential attack (attempts) on 10-05-2026. For more information o ... show more This IP address carried out 5 SSH credential attack (attempts) on 10-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH

Showing 1 to 15 of 632 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.100.217.164

🇹🇼 172.71.204.133

🇦🇺 158.178.141.16

🇭🇰 139.198.113.29

🇸🇬 94.231.206.12

🇳🇱 45.148.10.141

🇺🇸 43.153.54.138

🇧🇷 20.226.81.252

🇨🇦 20.151.206.212

🇨🇳 14.103.115.181

🇹🇭 172.69.237.145

🇮🇳 20.219.49.21

🇨🇳 183.197.224.251

🇺🇸 172.235.40.131

🇲🇩 172.69.200.142

🇧🇷 172.68.28.148

🇺🇸 162.216.149.136

🇵🇪 162.158.97.219

🇺🇸 148.153.32.10

🇹🇷 138.124.107.53