JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 14.103.39.27

14.103.39.27 was found in our database!

This IP was reported 269 times. Confidence of Abuse is 0%: ?

ISP	Beijing Volcano Engine Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS137718
Domain Name	bytedance.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 14.103.39.27

Whois 14.103.39.27

IP Abuse Reports for 14.103.39.27:

This IP address has been reported a total of 269 times from 92 distinct sources. 14.103.39.27 was first reported on December 31st 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Heathrxw	2024-03-31 01:35:14 (2 years ago)	14.103.39.27 - - [31/Mar/2024:03:35:14 +0200] "GET http://116.202.210.177:80/phpMyAdmin-2.10.0.2/scr ... show more 14.103.39.27 - - [31/Mar/2024:03:35:14 +0200] "GET http://116.202.210.177:80/phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0" 404 146 "-" "-" ... show less	Port Scan Bad Web Bot
🇺🇸 explody	2024-03-31 00:02:18 (2 years ago)	Mar 30 17:01:52 node sshd[2450216]: Failed password for root from 14.103.39.27 port 28382 ssh2 Mar 3 ... show more Mar 30 17:01:52 node sshd[2450216]: Failed password for root from 14.103.39.27 port 28382 ssh2 Mar 30 17:02:04 node sshd[2450218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.39.27 user=root Mar 30 17:02:06 node sshd[2450218]: Failed password for root from 14.103.39.27 port 48716 ssh2 Mar 30 17:02:15 node sshd[2450220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.39.27 user=root Mar 30 17:02:18 node sshd[2450220]: Failed password for root from 14.103.39.27 port 33714 ssh2 show less	Brute-Force SSH
🇷🇸 Smel	2024-03-30 16:00:05 (2 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇦🇺 Bay13	2024-03-30 00:04:00 (2 years ago)	f2b urlscanners	Port Scan Hacking Web App Attack
🇺🇸 dpinse	2024-03-29 13:35:07 (2 years ago)	PHPMyAdmin scans (looking for setup.php).	Web App Attack
🇰🇷 stypr	2024-03-29 02:03:17 (2 years ago)	{"level":"error","ts":"2024-03-29T02:03:11Z","logger":"http.log.access.log0","msg":"handled request" ... show more {"level":"error","ts":"2024-03-29T02:03:11Z","logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"14.103.39.27","remote_port":"53832","client_ip":"14.103.39.27","proto":"HTTP/1.0","method":"GET","host":"158.180.78.61:80","uri":"http://158.180.78.61:80/phpMyAdmin-2.8.0.2/scripts/setup.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000086132,"size":138,"status":418,"resp_headers":{"Server":["styhttpd"],"Content-Type":["text/plain; charset=utf-8"],"Access-Control-Allow-Methods":["POST, GET, OPTIONS"],"Access-Control-Allow-Origin":["*"],"Cache-Control":["public, max-age=1800, must-revalidate"]}} {"level":"error","ts":"2024-03-29T02:03:12Z","logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"14.103.39.27","remote_port":"49974","client_ip":"14.103.39.27","proto":"HTTP/1.0","method":"GET","host":"158.180.78.61:80","uri":"http://158.180.78.61:80/phpMyAdmin-2.10.2/scripts/setup.php","headers":{}},"bytes_read":0,"user_id":"","du ... show less	Hacking Brute-Force Web App Attack
🇺🇸 Mark--	2024-03-28 15:34:28 (2 years ago)	Unauthorized connection attempt detected port 8080	Hacking
🇺🇸 MPL	2024-03-28 08:10:15 (2 years ago)	tcp/80	Port Scan
🇺🇸 MPL	2024-03-27 06:42:17 (2 years ago)	tcp/8000	Port Scan
🇧🇪 sid3windr	2024-03-26 21:57:03 (2 years ago)	GET http://195.160.166.171:80/phpMyAdmin/scripts/setup.php (Tarpitted for 4s, wasted 360B)	Web App Attack
🇵🇱 rafamiga	2024-03-26 20:33:00 (2 years ago)	14.103.39.27:45110[26/Mar/2024:20:28:02.433] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC- ... show more 14.103.39.27:45110[26/Mar/2024:20:28:02.433] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC-- 55/55/0/0/0 0/0 {\|\|} "GET http://<ip>/phpMyAdmin/scripts/setup.php --- 14.103.39.27:45124[26/Mar/2024:20:28:06.848] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC-- 71/71/0/0/0 0/0 {\|\|} "GET http://<ip>/phpmyadmin/scripts/setup.php --- 14.103.39.27:50036[26/Mar/2024:20:28:08.003] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC-- 76/76/0/0/0 0/0 {\|\|} "GET http://<ip>/phpMyAdmin-2.11.4/scripts/setup.php --- 14.103.39.27:50038[26/Mar/2024:20:28:08.457] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC-- 75/75/0/0/0 0/0 {\|\|} "GET http://<ip>/phpMyAdmin-2.11.3/scripts/setup.php --- 14.103.39.27:50048[26/Mar/2024:20:28:09.597] http_https nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 - - SC-- 74/74/0/0/0 0/0 {\|\|} "GET http://<ip>/phpMyAdmin-2.10.0.2/scripts/setup.php --- show less	Port Scan
🇩🇪 ps-center	2024-03-26 18:20:44 (2 years ago)	SS5: Web Attack GET http://94.130.66.26:80/phpMyAdmin/scripts/setup.php	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 mattkrau	2024-03-26 11:45:28 (2 years ago)	14.103.39.27 - - [26/Mar/2024:12:45:27 +0100] "GET http://157.180.227.53:80/phpMyAdmin/scripts/setup ... show more 14.103.39.27 - - [26/Mar/2024:12:45:27 +0100] "GET http://157.180.227.53:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 301 162 "-" "-" 14.103.39.27 - - [26/Mar/2024:12:45:28 +0100] "GET http://157.180.227.53:80/phpmyadmin/scripts/setup.php HTTP/1.0" 301 162 "-" "-" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 scotynau	2024-03-25 12:01:58 (2 years ago)	2024/03/25 13:01:57.938 GET /phpMyAdmin/scripts/setup.php 404 10µs (14.103.39.27) 2024/03/25 13:01:5 ... show more 2024/03/25 13:01:57.938 GET /phpMyAdmin/scripts/setup.php 404 10µs (14.103.39.27) 2024/03/25 13:01:58.377 GET /phpmyadmin/scripts/setup.php 404 8µs (14.103.39.27) ... show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2024-03-25 06:04:05 (2 years ago)	tcp/80 (2 or more attempts)	Port Scan

Showing 1 to 15 of 269 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 165.154.11.170

🇨🇩 102.216.240.61

🇫🇷 95.111.230.251

🇱🇹 62.60.130.219

🇧🇪 198.235.24.162

🇩🇪 167.94.146.79

🇯🇵 161.33.210.117

🇯🇵 160.251.202.50

🇬🇧 139.59.184.99

🇧🇷 138.185.145.78

🇭🇰 119.246.15.94

🇷🇴 80.94.92.179

🇭🇰 52.175.121.47

🇷🇴 2.57.122.150

🇦🇷 181.21.161.221

🇨🇳 180.184.134.158

🇺🇸 162.216.150.84

🇩🇪 87.106.239.83

🇫🇷 85.217.140.3

🇨🇳 36.161.112.49