201.42.27.227

Banned by fail2ban jail sshd on etlab-research

Banned by fail2ban jail sshd on etlab-research

Banned by fail2ban jail sshd on etlab-research

Banned by fail2ban jail sshd on etlab-research

list.rtbh.com.tr report: tcp/0

This IP address carried out 167 port scanning attempts on 02-11-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/201.42.27.227

list.rtbh.com.tr report: tcp/0

This IP address carried out 62 SSH credential attack (attempts) on 01-11-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.

SSH Brute-Force

SSH - Attempt to login using invalid or illegal credential

Nov 2 07:21:46 YappyBots sshd[1285840]: Invalid user git from 201.42.27.227 port 37238 Nov 2 07:23:38 YappyBots sshd[1287573]: Invalid user tomcatuser from 201.42.27.227 port 53586 Nov 2 07:27:33 YappyBots sshd[1290935]: Invalid user bbx from 201. ... show more Nov 2 07:21:46 YappyBots sshd[1285840]: Invalid user git from 201.42.27.227 port 37238 Nov 2 07:23:38 YappyBots sshd[1287573]: Invalid user tomcatuser from 201.42.27.227 port 53586 Nov 2 07:27:33 YappyBots sshd[1290935]: Invalid user bbx from 201.42.27.227 port 60018 ... show less

2025-11-02T01:19:00.053482-05:00 nio.local.lan sshd-session[49986]: Disconnected from authenticating user root 201.42.27.227 port 52518 [preauth] ...

Nov 2 06:06:53 s158416 sshd[635700]: Failed password for root from 201.42.27.227 port 45656 ssh2 Nov 2 06:08:45 s158416 sshd[636423]: Invalid user phone from 201.42.27.227 port 32974 Nov 2 06:08:45 s158416 sshd[636423]: pam_unix(sshd:auth): authen ... show more Nov 2 06:06:53 s158416 sshd[635700]: Failed password for root from 201.42.27.227 port 45656 ssh2 Nov 2 06:08:45 s158416 sshd[636423]: Invalid user phone from 201.42.27.227 port 32974 Nov 2 06:08:45 s158416 sshd[636423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.42.27.227 Nov 2 06:08:45 s158416 sshd[636423]: Invalid user phone from 201.42.27.227 port 32974 Nov 2 06:08:48 s158416 sshd[636423]: Failed password for invalid user phone from 201.42.27.227 port 32974 ssh2 ... show less

201.42.27.227 (BR/Brazil/201-42-27-227.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 2 00:46:21 13554 sshd[2459]: pam_unix(sshd:auth): authentication ... show more 201.42.27.227 (BR/Brazil/201-42-27-227.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 2 00:46:21 13554 sshd[2459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.42.27.227 user=root Nov 2 00:46:23 13554 sshd[2459]: Failed password for root from 201.42.27.227 port 46020 ssh2 Nov 2 00:59:06 13554 sshd[3492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.42.27.227 user=root Nov 2 00:43:00 13554 sshd[1999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.82.84.134 user=root Nov 2 00:43:02 13554 sshd[1999]: Failed password for root from 154.82.84.134 port 50164 ssh2 IP Addresses Blocked: show less