JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.79.42.193

27.79.42.193 was found in our database!

This IP was reported 251 times. Confidence of Abuse is 0%: ?

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	localhost
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Buon Ma Thuot, Dak Lak

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.79.42.193

Whois 27.79.42.193

IP Abuse Reports for 27.79.42.193:

This IP address has been reported a total of 251 times from 204 distinct sources. 27.79.42.193 was first reported on March 20th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-14 05:45:41 (2 months ago)	Automated report: IP 27.79.42.193 detected in ssh-bruteforce activity on convergentdefense.com. Seen ... show more Automated report: IP 27.79.42.193 detected in ssh-bruteforce activity on convergentdefense.com. Seen 1x, first: 2026-03-20 04:00. [ISAC-India] show less	Brute-Force SSH
🇿🇦 agentics	2026-04-01 02:16:09 (2 months ago)	27.79.42.193 report :	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
🇹🇷 sh97	2026-03-31 20:24:54 (2 months ago)	tr01: SSH Brute Force from 27.79.42.193 at 2026-04-01 01:54:54 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-30 10:40:23 (2 months ago)	tr01: SSH Brute Force from 27.79.42.193 at 2026-03-30 16:10:23 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-30 03:56:18 (2 months ago)	tr01: SSH Brute Force from 27.79.42.193 at 2026-03-30 09:26:18 IST	Brute-Force SSH
🇹🇷 sh97	2026-03-28 13:27:14 (2 months ago)	tr01: SSH Brute Force from 27.79.42.193 at 2026-03-28 18:57:14 IST	Brute-Force SSH
🇮🇳 shantanoo	2026-03-21 19:13:59 (2 months ago)	The dark side is strong with this IP, but our firewall is stronger. You are going down, young one. . ... show more The dark side is strong with this IP, but our firewall is stronger. You are going down, young one. ... show less	Brute-Force SSH
🇨🇭 backslash	2026-03-21 05:51:05 (2 months ago)	SSH	Brute-Force
🇬🇧 andypiper	2026-03-21 02:02:17 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-03-21 01:11:08 (2 months ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/27.79.42.193	SSH
🇹🇷 rtbh.com.tr	2026-03-20 20:12:13 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇭 Modules	2026-03-20 11:00:00 (2 months ago)	Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.client.version, Pro ... show more Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.client.version, Protocol: ssh \| Cowrie honeypot: cowrie.client.kex, Protocol: ssh \| Cowrie honeypot: cowrie.login.success - user: root - password: @, Protocol: ssh \| Cowrie honeypot: cowrie.direct-tcpip.request, Protocol: ssh \| Cowrie honeypot: cowrie.direct-tcpip.ja4h, Protocol: ssh \| Cowrie honeypot: cowrie.direct-tcpip.data, Protocol: ssh \| Cowrie honeypot: cowrie.session.closed, Protocol: ssh (632 events, first: 2026-03-20T05:15:40.268Z, last: 2026-03-20T05:27:26.678Z) show less	Port Scan SSH
Anonymous	2026-03-20 08:23:21 (2 months ago)	Mar 20 08:22:53 ns5024002 sshd[3221716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Mar 20 08:22:53 ns5024002 sshd[3221716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.42.193 Mar 20 08:22:55 ns5024002 sshd[3221716]: Failed password for invalid user test from 27.79.42.193 port 32936 ssh2 Mar 20 08:23:19 ns5024002 sshd[3222125]: Invalid user xbmc from 27.79.42.193 port 40344 Mar 20 08:23:19 ns5024002 sshd[3222125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.42.193 Mar 20 08:23:20 ns5024002 sshd[3222125]: Failed password for invalid user xbmc from 27.79.42.193 port 40344 ssh2 ... show less	Brute-Force SSH
🇸🇬 drewf.ink	2026-03-20 08:18:04 (2 months ago)	[08:18] Attempted SSH login on port 22 with credentials root:welc0me	Brute-Force SSH
🇸🇬 itachi1706	2026-03-20 08:10:02 (2 months ago)	2026-03-20T08:09:54.423246+00:00 sg-jumphost-server sshd[2694643]: Connection closed by authenticati ... show more 2026-03-20T08:09:54.423246+00:00 sg-jumphost-server sshd[2694643]: Connection closed by authenticating user root 27.79.42.193 port 53340 [preauth] 2026-03-20T08:10:01.551926+00:00 sg-jumphost-server sshd[2694653]: Invalid user oracle from 27.79.42.193 port 53486 ... show less	Brute-Force SSH

Showing 1 to 15 of 251 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.175

🇺🇸 155.103.69.40

🇭🇰 152.32.211.139

🇳🇱 91.92.40.204

🇹🇼 61.220.235.10

🇰🇷 58.224.62.29

🇧🇪 34.52.161.217

🇧🇪 198.235.24.172

🇳🇱 192.42.116.14

🇺🇸 165.154.134.138

🇸🇬 118.26.111.107

🇮🇳 117.223.152.94

🇯🇵 103.125.146.22

🇱🇹 77.90.185.80

🇺🇸 66.132.186.224

🇺🇸 64.62.197.24

🇫🇮 62.60.152.192

🇫🇷 51.68.34.131

🇸🇨 41.86.34.139

🇺🇸 20.65.138.86