Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
122.155.204.27 has been reported 253
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
253
times from
161 distinct
sources.
122.155.204.27 was first reported on
, and the most recent report was
.
ThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/122.155.204.27
2023-06- ...
show moreThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/122.155.204.27
2023-06-25 07:12:32 ["uname -a"]
2023-06-25 07:12:28 ["uname -a"]
2023-06-25 07:12:24 ["uname -a"]
2023-06-25 07:12:18 ["uname -a"]
show less
This IP address carried out 82 SSH credential attack (attempts) on 24-06-2023. For more information ...
show moreThis IP address carried out 82 SSH credential attack (attempts) on 24-06-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
ThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/122.155.204.27
2023-06- ...
show moreThreatBook Intelligence: Brute Force more details on http://threatbook.io/ip/122.155.204.27
2023-06-24 03:19:56 ["uname -a"]
2023-06-24 03:19:51 ["uname -a"]
2023-06-24 03:19:54 ["uname -a"]
2023-06-24 03:19:52 ["uname -a"]
2023-06-24 03:19:58 ["uname -a"]
show less
Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 122.155.204.27, Reason:[ ...
show moreCluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 122.155.204.27, Reason:[122.155.204.27 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Jun 24 16:50:08 dotcom2 sshd\[12240\]: User root from 122.155.204.27 not allowed because not listed ...
show moreJun 24 16:50:08 dotcom2 sshd\[12240\]: User root from 122.155.204.27 not allowed because not listed in AllowUsers
Jun 24 16:50:08 dotcom2 sshd\[12240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.204.27 user=root
...
show less
Jun 24 22:28:31 router02.mth-medical.com sshd[4156024]: Connection closed by authenticating user roo ...
show moreJun 24 22:28:31 router02.mth-medical.com sshd[4156024]: Connection closed by authenticating user root 122.155.204.27 port 2800 [preauth]
Jun 24 22:28:33 router02.mth-medical.com sshd[4156027]: Connection closed by authenticating user root 122.155.204.27 port 2801 [preauth]
Jun 24 22:28:34 router02.mth-medical.com sshd[4156029]: Connection closed by authenticating user root 122.155.204.27 port 2802 [preauth]
Jun 24 22:28:35 router02.mth-medical.com sshd[4156031]: Connection closed by authenticating user root 122.155.204.27 port 2803 [preauth]
Jun 24 22:28:37 router02.mth-medical.com sshd[4156033]: Connection closed by authenticating user root 122.155.204.27 port 2804 [preauth]
show less
Jun 24 22:28:31 router02.mth-medical.com sshd[4156024]: Connection closed by authenticating user roo ...
show moreJun 24 22:28:31 router02.mth-medical.com sshd[4156024]: Connection closed by authenticating user root 122.155.204.27 port 2800 [preauth]
Jun 24 22:28:33 router02.mth-medical.com sshd[4156027]: Connection closed by authenticating user root 122.155.204.27 port 2801 [preauth]
Jun 24 22:28:34 router02.mth-medical.com sshd[4156029]: Connection closed by authenticating user root 122.155.204.27 port 2802 [preauth]
Jun 24 22:28:35 router02.mth-medical.com sshd[4156031]: Connection closed by authenticating user root 122.155.204.27 port 2803 [preauth]
Jun 24 22:28:37 router02.mth-medical.com sshd[4156033]: Connection closed by authenticating user root 122.155.204.27 port 2804 [preauth]
show less