JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.104.27.217

Neutral Activity

Abuse Confidence Score

0% Low Risk

56 reports

30 reporters · latest 10 months ago

ISP: STARCLOUD GLOBAL PTE. LTD.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS139659
Domain Name: nebulaglobal.com
Country: 🇭🇰 Hong Kong
City: Harmony Garden, Eastern District

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.104.27.217 has been reported 56 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

56 from 30 distinct reporters

First reported

December 26th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-01-05 23:32:08 UTC · (10 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-01-04 23:31:24 UTC · (10 months ago)		Brute-Force Web App Attack
🇩🇪 ipcop.net	2026-01-04 08:09:52 UTC · (10 months ago)	Jan 4 09:07:56 cti1.cti.srvfarm.net sshd[1296644]: Connection closed by authenticating user admin 149.104.27.217 port 47454 [preauth] Jan 4 09:08:33 cti1.cti.srvfarm.net sshd[1296715]: Invalid user orangepi from 149.104.27.217 port 60316 Jan 4 09: ... show more Jan 4 09:07:56 cti1.cti.srvfarm.net sshd[1296644]: Connection closed by authenticating user admin 149.104.27.217 port 47454 [preauth] Jan 4 09:08:33 cti1.cti.srvfarm.net sshd[1296715]: Invalid user orangepi from 149.104.27.217 port 60316 Jan 4 09:08:34 cti1.cti.srvfarm.net sshd[1296715]: Connection closed by invalid user orangepi 149.104.27.217 port 60316 [preauth] Jan 4 09:09:12 cti1.cti.srvfarm.net sshd[1296791]: Connection closed by authenticating user root 149.104.27.217 port 44104 [preauth] Jan 4 09:09:52 cti1.cti.srvfarm.net sshd[1296817]: Connection closed by authenticating user root 149.104.27.217 port 45950 [preauth] show less	Brute-Force
Anonymous	2026-01-04 08:07:52 UTC · (10 months ago)	...	Bad Web Bot
🇷🇺 Alexandr Kulkov	2026-01-04 07:58:41 UTC · (10 months ago)	2026-01-04T14:58:38.502863+07:00 sz sshd[574303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 2026-01-04T14:58:40.323550+07:00 sz sshd[574303]: Failed password for invalid user admin from 149 ... show more 2026-01-04T14:58:38.502863+07:00 sz sshd[574303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 2026-01-04T14:58:40.323550+07:00 sz sshd[574303]: Failed password for invalid user admin from 149.104.27.217 port 43604 ssh2 ... show less	Brute-Force SSH
🇫🇷 dynamix	2026-01-04 07:53:32 UTC · (10 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 RAP	2026-01-04 07:13:59 UTC · (10 months ago)	2026-01-04 07:13:59 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇳🇱 StopAbuse	2026-01-04 07:12:47 UTC · (10 months ago)	tcp/22	Port Scan SSH
🇺🇸 SuperCores Hosting	2026-01-04 07:12:01 UTC · (10 months ago)	[2026-01-04 07:12:01.597954] TELNET/23 Unautorized connection, Suspicious Mirai Botnet.	DDoS Attack Port Scan Hacking Brute-Force IoT Targeted
🇩🇪 ps-center	2026-01-04 07:08:51 UTC · (10 months ago)	SES-W: TCP-Scanner. Port: 22	Port Scan
🇰🇷 Woodie	2026-01-04 06:42:33 UTC · (10 months ago)	2026-01-04T01:40:13.074423-05:00 debian sshd[1344995]: Invalid user orangepi from 149.104.27.217 port 47362 2026-01-04T01:40:13.077873-05:00 debian sshd[1344995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... show more 2026-01-04T01:40:13.074423-05:00 debian sshd[1344995]: Invalid user orangepi from 149.104.27.217 port 47362 2026-01-04T01:40:13.077873-05:00 debian sshd[1344995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 2026-01-04T01:40:15.313623-05:00 debian sshd[1344995]: Failed password for invalid user orangepi from 149.104.27.217 port 47362 ssh2 2026-01-04T01:42:30.781086-05:00 debian sshd[1345491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 user=root 2026-01-04T01:42:32.159629-05:00 debian sshd[1345491]: Failed password for root from 149.104.27.217 port 44174 ssh2 ... show less	Brute-Force SSH
🇳🇴 kipfel★	2026-01-04 06:13:11 UTC · (10 months ago)	2026-01-04T06:56:53.863916+01:00 gigahost-vm-cm21-2c2g-sfj sshd[3635714]: Invalid user admin from 149.104.27.217 port 44618 2026-01-04T06:58:53.113307+01:00 gigahost-vm-cm21-2c2g-sfj sshd[3635720]: Invalid user orangepi from 149.104.27.217 port 39970 ... show more 2026-01-04T06:56:53.863916+01:00 gigahost-vm-cm21-2c2g-sfj sshd[3635714]: Invalid user admin from 149.104.27.217 port 44618 2026-01-04T06:58:53.113307+01:00 gigahost-vm-cm21-2c2g-sfj sshd[3635720]: Invalid user orangepi from 149.104.27.217 port 39970 2026-01-04T07:13:11.099201+01:00 gigahost-vm-cm21-2c2g-sfj sshd[3635851]: Invalid user test from 149.104.27.217 port 56796 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-01-04 06:07:08 UTC · (10 months ago)	tcp/2222 (4 or more attempts)	Port Scan
🇩🇪 david1117	2026-01-04 06:00:20 UTC · (10 months ago)	Jan 4 05:52:19 orion01 sshd[2375979]: Invalid user admin from 149.104.27.217 port 40754 Jan 4 05:54:17 orion01 sshd[2383087]: Invalid user orangepi from 149.104.27.217 port 60642 Jan 4 05:56:18 orion01 sshd[2390357]: User root from 149.104.27.217 ... show more Jan 4 05:52:19 orion01 sshd[2375979]: Invalid user admin from 149.104.27.217 port 40754 Jan 4 05:54:17 orion01 sshd[2383087]: Invalid user orangepi from 149.104.27.217 port 60642 Jan 4 05:56:18 orion01 sshd[2390357]: User root from 149.104.27.217 not allowed because not listed in AllowUsers Jan 4 05:58:20 orion01 sshd[2397807]: User root from 149.104.27.217 not allowed because not listed in AllowUsers Jan 4 06:00:19 orion01 sshd[2404970]: User root from 149.104.27.217 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-01-04 05:59:55 UTC · (10 months ago)	2026-01-04T00:57:53.634854-05:00 debian sshd[1334044]: Invalid user orangepi from 149.104.27.217 port 59058 2026-01-04T00:57:53.639784-05:00 debian sshd[1334044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... show more 2026-01-04T00:57:53.634854-05:00 debian sshd[1334044]: Invalid user orangepi from 149.104.27.217 port 59058 2026-01-04T00:57:53.639784-05:00 debian sshd[1334044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 2026-01-04T00:57:55.178595-05:00 debian sshd[1334044]: Failed password for invalid user orangepi from 149.104.27.217 port 59058 ssh2 2026-01-04T00:59:52.722061-05:00 debian sshd[1334978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.104.27.217 user=root 2026-01-04T00:59:54.928114-05:00 debian sshd[1334978]: Failed password for root from 149.104.27.217 port 36722 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 138.204.193.115

🇳🇱 45.148.10.152

🇳🇱 45.148.10.151

🇺🇸 40.74.210.29

🇧🇪 35.210.61.208

🇺🇸 216.25.90.72

🇵🇰 203.130.24.42

🇵🇪 190.236.6.47

🇧🇴 190.129.122.185

🇺🇸 162.216.149.184

🇭🇰 154.51.59.118

🇺🇸 104.237.145.228

🇫🇷 86.235.61.229

🇺🇦 46.149.95.72

🇺🇸 50.6.205.177

🇺🇦 45.14.109.200

🇧🇪 34.77.99.151

🇪🇨 186.209.213.54

🇨🇳 118.196.119.108

🇺🇸 104.197.111.254