This IP address has been reported a total of
16
times from
14 distinct
sources.
27.79.45.254 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
India
with 9
reports;
Taiwan
with 5
reports;
Canada
with 1
report.
The most common categories in these recent reports were:
Brute-Force
16
times;
SSH
14
times;
Hacking
1
time;
Web App Attack
1
time;
Port Scan
1
time;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Sep 11 01:29:46 bacztwo sshd-session[2291425]: Invalid user ssh from 27.79.45.254 port 54124
Sep 11 ...
show moreSep 11 01:29:46 bacztwo sshd-session[2291425]: Invalid user ssh from 27.79.45.254 port 54124
Sep 11 01:29:48 bacztwo sshd-session[2291425]: error: PAM: User not known to the underlying authentication module for illegal user ssh from 27.79.45.254
Sep 11 01:29:48 bacztwo sshd-session[2291425]: Failed keyboard-interactive/pam for invalid user ssh from 27.79.45.254 port 54124 ssh2
Sep 11 01:29:48 bacztwo sshd-session[2291425]: error: PAM: User not known to the underlying authentication module for illegal user ssh from 27.79.45.254
Sep 11 01:29:48 bacztwo sshd-session[2291425]: Failed keyboard-interactive/pam for invalid user ssh from 27.79.45.254 port 54124 ssh2
Sep 11 01:29:49 bacztwo sshd-session[2291425]: Connection closed by invalid user ssh 27.79.45.254 port 54124 [preauth]
Sep 11 01:29:49 bacztwo sshd-session[2291425]: Connection closed by invalid user ssh 27.79.45.254 port 54124 [preauth]
Sep 11 01:29:53 bacztwo sshd-session[2291486]: Invalid user sales from 27.79.45.254 port 54146
...
show less
2026-09-11T00:59:06.396822+08:00 nnc-vm-tw-lite-light-tpe sshd-session[1002485]: Invalid user ubnt f ...
show more2026-09-11T00:59:06.396822+08:00 nnc-vm-tw-lite-light-tpe sshd-session[1002485]: Invalid user ubnt from 27.79.45.254 port 58746
2026-09-11T00:59:32.451666+08:00 nnc-vm-tw-lite-light-tpe sshd-session[1002489]: Invalid user admin from 27.79.45.254 port 51880
2026-09-11T00:59:36.219946+08:00 nnc-vm-tw-lite-light-tpe sshd-session[1002491]: Invalid user squid from 27.79.45.254 port 51888
...
show less
Sep 11 00:58:48 bacztwo sshd-session[2236614]: Invalid user user from 27.79.45.254 port 60500
Sep 11 ...
show moreSep 11 00:58:48 bacztwo sshd-session[2236614]: Invalid user user from 27.79.45.254 port 60500
Sep 11 00:58:51 bacztwo sshd-session[2236614]: error: PAM: User not known to the underlying authentication module for illegal user user from 27.79.45.254
Sep 11 00:58:51 bacztwo sshd-session[2236614]: Failed keyboard-interactive/pam for invalid user user from 27.79.45.254 port 60500 ssh2
Sep 11 00:58:51 bacztwo sshd-session[2236614]: Connection closed by invalid user user 27.79.45.254 port 60500 [preauth]
Sep 11 00:58:56 bacztwo sshd-session[2236661]: error: PAM: Authentication failure for squid from 27.79.45.254
Sep 11 00:59:04 bacztwo sshd-session[2236749]: Invalid user support from 27.79.45.254 port 53320
Sep 11 00:59:06 bacztwo sshd-session[2236749]: error: PAM: User not known to the underlying authentication module for illegal user support from 27.79.45.254
Sep 11 00:59:06 bacztwo sshd-session[2236749]: Failed keyboard-interactive/pam for invalid user support from 27.79.45.254 port 53320
...
show less
2026-09-11T00:59:06.373524+08:00 cowgl sshd[2294867]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-09-11T00:59:06.373524+08:00 cowgl sshd[2294867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.45.254
2026-09-11T00:59:08.244266+08:00 cowgl sshd[2294867]: Failed password for invalid user support from 27.79.45.254 port 36342 ssh2
2026-09-11T00:59:09.455230+08:00 cowgl sshd[2294867]: Connection closed by invalid user support 27.79.45.254 port 36342 [preauth]
2026-09-11T00:59:15.365510+08:00 cowgl sshd[2295236]: Invalid user config from 27.79.45.254 port 36354
...
show less
2026-09-10T16:58:51.645705+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[2131123]: Invalid user user from ...
show more2026-09-10T16:58:51.645705+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[2131123]: Invalid user user from 27.79.45.254 port 43696
2026-09-10T16:58:54.188953+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[2131125]: Invalid user installer from 27.79.45.254 port 43710
2026-09-10T16:59:05.922166+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[2131213]: Invalid user ubnt from 27.79.45.254 port 42988
...
show less
SSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dro ...
show moreSSH brute-force / unauthorized pre-auth probing against production node Manual-Audit. Filtered & dropped by iptables. Raw audit:
Manual audit command trigger
show less
Automated trigger via Nginx Police. Reason: FAKE-USER-BOT. Trigger Log: 2026-09-10T22:03:04.040163+0 ...
show moreAutomated trigger via Nginx Police. Reason: FAKE-USER-BOT. Trigger Log: 2026-09-10T22:03:04.040163+05:30 vm774288012 sshd[1618102]: User root from 27.79.45.254 not allowed because not listed in AllowUsers
show less
2026-09-10T16:32:51.893563+00:00 edge-con-bom01.int.pdx.net.uk sshd[277793]: Failed password for roo ...
show more2026-09-10T16:32:51.893563+00:00 edge-con-bom01.int.pdx.net.uk sshd[277793]: Failed password for root from 27.79.45.254 port 35014 ssh2
2026-09-10T16:32:51.326583+00:00 edge-con-bom01.int.pdx.net.uk sshd[277817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.45.254
2026-09-10T16:32:52.975559+00:00 edge-con-bom01.int.pdx.net.uk sshd[277817]: Failed password for invalid user admin from 27.79.45.254 port 60066 ssh2
...
show less
