JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.79.47.2

27.79.47.2 was found in our database!

This IP was reported 226 times. Confidence of Abuse is 100%: ?

100%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	localhost
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Buon Ma Thuot, Dak Lak

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.79.47.2

Whois 27.79.47.2

IP Abuse Reports for 27.79.47.2:

This IP address has been reported a total of 226 times from 176 distinct sources. 27.79.47.2 was first reported on August 28th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 sh97	2026-05-25 11:38:44 (2 weeks ago)	CA02-HB-TOR: SSH Brute Force from 27.79.47.2 at 2026-05-25 17:08:43 IST	Brute-Force SSH
🇮🇹 ivanbiagi7	2026-05-24 00:09:07 (2 weeks ago)	(localhost/crowdsec) crowdsecurity/ssh-bf_user-enum by ip 27.79.47.2 (VN/7552) : 4h ban on Ip 27.79. ... show more (localhost/crowdsec) crowdsecurity/ssh-bf_user-enum by ip 27.79.47.2 (VN/7552) : 4h ban on Ip 27.79.47.2 show less	Port Scan
🇧🇷 helix	2026-05-22 12:16:10 (3 weeks ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-20 22:22:16 (3 weeks ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇬🇧 Project_Gifted1	2026-05-19 00:46:48 (3 weeks ago)	Gifted1 Active Recon Scanner Footprint - Protocol: http://206.189.21.23/agent-protocol.json	Port Scan Brute-Force
🇨🇳 ThreatBook.io	2026-05-18 22:55:00 (3 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/27.79.47.2	SSH
🇨🇦 bmcg	2026-05-18 19:30:47 (3 weeks ago)	2026-05-18 01:33:59 server sshd[94733]: Failed password for invalid user psybnc from 27.79.47.2 port ... show more 2026-05-18 01:33:59 server sshd[94733]: Failed password for invalid user psybnc from 27.79.47.2 port 52028 ssh2 show less	Brute-Force SSH
🇦🇺 greenhost.com.au	2026-05-18 11:00:33 (3 weeks ago)	Automated report: 50 attacks in 24h targeting flightapp, privacymate via FAIL2BAN-780, SSH. SSH/inva ... show more Automated report: 50 attacks in 24h targeting flightapp, privacymate via FAIL2BAN-780, SSH. SSH/invalid_user: 38 on privacymate; SSH/brute_force: 11 on flightapp, privacymate; FAIL2BAN-780/banned: 1 on privacymate show less	Brute-Force SSH
🇦🇺 LiftUp Hosting	2026-05-18 10:21:30 (3 weeks ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root123, config:config, root ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root123, config:config, root:@, installer:installer, root:admin, support:support, root:root, admin:admin@123, ubnt:ubnt, guest:guest, admin:0l0ctyQh243O63uD, admin:admin123, system:OkwKcECs8qJP2Z, test:test, user:1234, ftp:ftp, admin:default, root:ipscan, 1234:1234, root:12345, username:password, ftpuser:asteriskftp, test:q1w2e3, root:abcdefg, root:temp, root:password, plex:plex • Number of login attempts: 27 • Client: SSH-2.0-AsyncSSH_2.1.0 • TCP tunnels: ip-who.com:80 show less	Brute-Force SSH
🇦🇺 Powston	2026-05-18 10:13:51 (3 weeks ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-18T10:10:50Z and 2026-05- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-18T10:10:50Z and 2026-05-18T10:13:50Z show less	Brute-Force SSH
🇦🇺 Ticketebo Pty. Ltd.	2026-05-18 10:13:23 (3 weeks ago)	May 18 20:10:52 mags sshd-session[2306915]: Invalid user installer from 27.79.47.2 port 47152 May 18 ... show more May 18 20:10:52 mags sshd-session[2306915]: Invalid user installer from 27.79.47.2 port 47152 May 18 20:11:05 mags sshd-session[2306927]: Invalid user admin from 27.79.47.2 port 60760 May 18 20:11:41 mags sshd-session[2306931]: Invalid user support from 27.79.47.2 port 47988 May 18 20:12:13 mags sshd-session[2306970]: Invalid user admin from 27.79.47.2 port 47072 May 18 20:12:30 mags sshd-session[2306976]: Invalid user ubnt from 27.79.47.2 port 49088 May 18 20:12:59 mags sshd-session[2306980]: Invalid user test from 27.79.47.2 port 36848 May 18 20:13:22 mags sshd-session[2306995]: Invalid user admin from 27.79.47.2 port 38200 ... show less	Brute-Force
🇦🇺 paradoxnetworks	2026-05-18 10:13:19 (3 weeks ago)	2026-05-18T10:10:37.793678+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[2072733]: Invalid user installer ... show more 2026-05-18T10:10:37.793678+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[2072733]: Invalid user installer from 27.79.47.2 port 54538 2026-05-18T10:12:02.420125+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[2072849]: Invalid user support from 27.79.47.2 port 46196 2026-05-18T10:13:17.056713+00:00 edge-eqx-syd03.int.pdx.net.uk sshd[2072925]: Invalid user admin from 27.79.47.2 port 34694 ... show less	Brute-Force SSH
🇦🇺 Proxay Fox	2026-05-18 10:12:31 (3 weeks ago)	May 18 20:11:11 webServer-02 sshd[259712]: Invalid user ubnt from 27.79.47.2 port 46802 May 18 20:11 ... show more May 18 20:11:11 webServer-02 sshd[259712]: Invalid user ubnt from 27.79.47.2 port 46802 May 18 20:11:33 webServer-02 sshd[259720]: Invalid user config from 27.79.47.2 port 55696 May 18 20:11:36 webServer-02 sshd[259724]: Invalid user installer from 27.79.47.2 port 55722 May 18 20:12:08 webServer-02 sshd[259739]: Invalid user squid from 27.79.47.2 port 39284 May 18 20:12:29 webServer-02 sshd[259743]: Invalid user system from 27.79.47.2 port 33346 ... show less	Brute-Force SSH
🇦🇺 smfhelper.org	2026-05-18 10:12:21 (3 weeks ago)	(sshd) Failed SSH login from 27.79.47.2 (VN/Vietnam/localhost): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 27.79.47.2 (VN/Vietnam/localhost): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2026-05-18T20:12:05.434430+10:00 arcade-james sshd-session[246226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.2 user=root 2026-05-18T20:12:07.098338+10:00 arcade-james sshd-session[246226]: Failed password for invalid user root from 27.79.47.2 port 47342 ssh2 2026-05-18T20:12:12.823387+10:00 arcade-james sshd-session[246233]: Invalid user squid from 27.79.47.2 port 59736 2026-05-18T20:12:12.987587+10:00 arcade-james sshd-session[246233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.2 2026-05-18T20:12:14.914593+10:00 arcade-james sshd-session[246233]: Failed password for invalid user squid from 27.79.47.2 port 59736 ssh2 show less	Port Scan
🇦🇺 ts_sre	2026-05-18 10:12:19 (3 weeks ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-18T10:10:37Z and 2026-05- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-18T10:10:37Z and 2026-05-18T10:12:19Z show less	Brute-Force SSH

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇺🇸 184.105.247.244

🇺🇸 166.88.231.5

🇨🇳 139.212.69.61

🇷🇺 91.78.18.242

🇺🇸 216.25.89.139

🇧🇷 191.252.226.167

🇨🇴 190.108.79.142

🇭🇰 119.8.29.62

🇿🇦 102.182.110.14

🇺🇸 67.60.21.52

🇳🇱 45.148.10.151

🇳🇱 45.148.10.147

🇭🇺 212.96.49.55

🇺🇸 205.233.42.156

🇬🇧 193.163.125.167

🇩🇪 178.105.170.143

🇳🇱 95.97.67.190

🇺🇸 76.124.3.157

🇧🇷 45.160.179.10