JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

27.79.47.6

Neutral Activity

Abuse Confidence Score

0% Low Risk

36 reports

25 reporters · latest 2 months ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS7552
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Buon Ma Thuot, Dak Lak

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

27.79.47.6 has been reported 36 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

36 from 25 distinct reporters

First reported

April 7th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-09-02 19:30:08 UTC · (2 months ago)	Fail2Ban Jail: sshd \| Evidence: Apr 7 00:10:15 fisher sshd[196231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 Apr 7 00:10:17 fisher sshd[196231]: Failed password for invalid user admin from ... show more Fail2Ban Jail: sshd \| Evidence: Apr 7 00:10:15 fisher sshd[196231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 Apr 7 00:10:17 fisher sshd[196231]: Failed password for invalid user admin from 27.79.47.6 port 43448 ssh2 show less	Brute-Force SSH
🇧🇷 helix	2026-05-04 19:07:47 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-24 03:19:57 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-22 03:57:42 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-10 06:22:12 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇧🇷 helix	2026-04-09 06:11:57 UTC · (7 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇰🇷 ericshim.me	2026-04-07 11:32:49 UTC · (7 months ago)	Reported from fail2ban historical logs. (Detected at 2026-04-07 11:32:49)	Brute-Force SSH
🇧🇷 alertalicitacao.com.br	2026-04-07 03:14:54 UTC · (7 months ago)	2026-04-07T03:13:07.966428+00:00 alertalicitacao sshd[773272]: Invalid user config from 27.79.47.6 port 38470 2026-04-07T03:14:41.704571+00:00 alertalicitacao sshd[773507]: Connection from 27.79.47.6 port 60190 on 192.168.100.167 port 22 rdomain "" 2 ... show more 2026-04-07T03:13:07.966428+00:00 alertalicitacao sshd[773272]: Invalid user config from 27.79.47.6 port 38470 2026-04-07T03:14:41.704571+00:00 alertalicitacao sshd[773507]: Connection from 27.79.47.6 port 60190 on 192.168.100.167 port 22 rdomain "" 2026-04-07T03:14:43.204278+00:00 alertalicitacao sshd[773507]: User root from 27.79.47.6 not allowed because not listed in AllowUsers 2026-04-07T03:14:50.050011+00:00 alertalicitacao sshd[773524]: Connection from 27.79.47.6 port 54110 on 192.168.100.167 port 22 rdomain "" 2026-04-07T03:14:54.541772+00:00 alertalicitacao sshd[773524]: Invalid user guest from 27.79.47.6 port 54110 ... show less	Brute-Force SSH
🇧🇷 ViniSchneider	2026-04-07 03:14:40 UTC · (7 months ago)	2026-04-07T00:11:19.214508-03:00 Vini-Server sshd[774519]: Failed password for invalid user admin from 27.79.47.6 port 35694 ssh2 2026-04-07T00:12:32.475484-03:00 Vini-Server sshd[774536]: Invalid user config from 27.79.47.6 port 36148 2026-04-07T00: ... show more 2026-04-07T00:11:19.214508-03:00 Vini-Server sshd[774519]: Failed password for invalid user admin from 27.79.47.6 port 35694 ssh2 2026-04-07T00:12:32.475484-03:00 Vini-Server sshd[774536]: Invalid user config from 27.79.47.6 port 36148 2026-04-07T00:12:33.051337-03:00 Vini-Server sshd[774536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 2026-04-07T00:12:35.093754-03:00 Vini-Server sshd[774536]: Failed password for invalid user config from 27.79.47.6 port 36148 ssh2 2026-04-07T00:14:39.268215-03:00 Vini-Server sshd[774655]: Invalid user admin from 27.79.47.6 port 54750 ... show less	Brute-Force SSH
🇧🇷 acidburn	2026-04-07 03:12:44 UTC · (7 months ago)	SSH brute forcing, multiple failed attempts	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2026-04-07 03:12:32 UTC · (7 months ago)	2026-04-07T00:11:07.548980-03:00 dns1 sshd[5920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 2026-04-07T00:11:09.788180-03:00 dns1 sshd[5920]: Failed password for invalid user admin from 27.79. ... show more 2026-04-07T00:11:07.548980-03:00 dns1 sshd[5920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 2026-04-07T00:11:09.788180-03:00 dns1 sshd[5920]: Failed password for invalid user admin from 27.79.47.6 port 48030 ssh2 2026-04-07T00:11:11.371284-03:00 dns1 sshd[5920]: Connection closed by invalid user admin 27.79.47.6 port 48030 [preauth] 2026-04-07T00:12:21.646311-03:00 dns1 sshd[5926]: Invalid user user from 27.79.47.6 port 44408 2026-04-07T00:12:30.694194-03:00 dns1 sshd[5928]: Invalid user config from 27.79.47.6 port 44434 show less	Brute-Force SSH
🇧🇷 diego	2026-04-07 03:11:59 UTC · (7 months ago)	[rede-arem1] (sshd) Failed SSH login from 27.79.47.6 (VN/Vietnam/localhost): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 7 00:11:43 sshd[29969]: Invalid user [USERNAME] from 27.79.47.6 port 53268 Apr 7 00:11: ... show more [rede-arem1] (sshd) Failed SSH login from 27.79.47.6 (VN/Vietnam/localhost): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 7 00:11:43 sshd[29969]: Invalid user [USERNAME] from 27.79.47.6 port 53268 Apr 7 00:11:44 sshd[29973]: Invalid user [USERNAME] from 27.79.47.6 port 53278 Apr 7 00:11:46 sshd[29973]: Failed password for invalid user [USERNAME] from 27.79.47.6 port 53278 ssh2 Apr 7 00:11:46 sshd[29969]: Failed password for invalid user [USERNAME] from 27.79.47.6 port 53268 ssh2 Apr 7 00:11:54 sshd[29963]: Invalid user [USERNAME] from 27.79.47.6 port 34936 show less	Port Scan
🇪🇸 gnom4ik	2026-04-07 03:11:31 UTC · (7 months ago)	ban-reviewer auto report; ip=27.79.47.6; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=11; kernel_events=0; si ... show more ban-reviewer auto report; ip=27.79.47.6; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=11; kernel_events=0; signals=ip_decision_count_high; auth_events_high show less	Port Scan Hacking Brute-Force SSH
🇧🇷 ItsClairton	2026-04-07 03:11:27 UTC · (7 months ago)	Apr 7 00:10:02 proxy-03 sshd[3163557]: Failed password for invalid user admin from 27.79.47.6 port 43554 ssh2 Apr 7 00:11:23 proxy-03 sshd[3164309]: Invalid user admin from 27.79.47.6 port 42256 Apr 7 00:11:25 proxy-03 sshd[3164327]: Invalid user ... show more Apr 7 00:10:02 proxy-03 sshd[3163557]: Failed password for invalid user admin from 27.79.47.6 port 43554 ssh2 Apr 7 00:11:23 proxy-03 sshd[3164309]: Invalid user admin from 27.79.47.6 port 42256 Apr 7 00:11:25 proxy-03 sshd[3164327]: Invalid user admin from 27.79.47.6 port 40574 Apr 7 00:11:24 proxy-03 sshd[3164309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 Apr 7 00:11:26 proxy-03 sshd[3164309]: Failed password for invalid user admin from 27.79.47.6 port 42256 ssh2 ... show less	Brute-Force SSH
🇧🇷 aweher	2026-04-07 03:11:16 UTC · (7 months ago)	2026-04-07T03:10:17.011320+00:00 r1.sp1.as64172.enrut.ar sshd[1815637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 2026-04-07T03:10:19.048775+00:00 r1.sp1.as64172.enrut.ar sshd[1815637]: Failed ... show more 2026-04-07T03:10:17.011320+00:00 r1.sp1.as64172.enrut.ar sshd[1815637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.47.6 2026-04-07T03:10:19.048775+00:00 r1.sp1.as64172.enrut.ar sshd[1815637]: Failed password for invalid user admin from 27.79.47.6 port 32986 ssh2 2026-04-07T03:11:15.074064+00:00 r1.sp1.as64172.enrut.ar sshd[1815640]: Invalid user user from 27.79.47.6 port 43924 ... show less	Brute-Force SSH

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 176.53.159.197

🇧🇩 103.158.119.173

🇺🇸 71.6.135.131

🇺🇸 54.84.248.251

🇺🇦 185.212.236.0

🇦🇷 179.49.123.195

🇵🇱 172.64.200.117

🇵🇱 172.64.200.5

🇺🇸 104.197.111.254

🇷🇴 92.118.39.50

🇨🇦 35.203.95.169

🇦🇺 2602:f71d:200::10

🇧🇷 187.15.189.229

🇨🇴 179.51.116.226

🇺🇸 162.216.149.205

🇮🇳 103.176.160.146

🇷🇴 92.118.39.78

🇸🇦 82.167.44.210

🇧🇷 200.195.92.244

🇹🇷 193.35.153.146