JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 27.79.5.52

27.79.5.52 was found in our database!

This IP was reported 246 times. Confidence of Abuse is 52%: ?

52%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	localhost
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Ho Chi Minh City, Ho Chi Minh City (HCMC)

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 27.79.5.52

Whois 27.79.5.52

IP Abuse Reports for 27.79.5.52:

This IP address has been reported a total of 246 times from 193 distinct sources. 27.79.5.52 was first reported on September 11th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Fasetech	2026-05-19 14:45:35 (2 weeks ago)	SecLedge detected suspicious activity. Score: 61.32. Sensor: T-Pot.	Brute-Force Web App Attack
🇫🇷 Fasetech	2026-05-09 05:37:23 (3 weeks ago)	SecLedge detected suspicious activity. Score: 61.32. Sensor: T-Pot.	Brute-Force Web App Attack
🇫🇷 Fasetech	2026-05-06 05:29:28 (4 weeks ago)	SecLedge detected suspicious activity. Score: 61.32. Sensor: T-Pot.	Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 01:09:13 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇧🇷 helix	2026-05-04 19:07:48 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇫🇷 Fasetech	2026-04-19 15:45:06 (1 month ago)	SecLedge detected suspicious activity. Score: 61.32. Sensor: T-Pot.	Brute-Force Web App Attack
🇧🇷 helix	2026-04-13 15:25:35 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇫🇷 Fasetech	2026-04-12 11:55:34 (1 month ago)	SecLedge detected suspicious activity. Score: 61.32. Sensor: T-Pot.	Brute-Force Web App Attack
🇩🇪 EnthecSolutions	2026-04-11 14:01:27 (1 month ago)	Detected by Enthec Solutions. \| Attempts: 102 in 24h \| Target port: 22	Brute-Force SSH
🇫🇷 tecnicorioja	2026-04-11 12:00:14 (1 month ago)	Failed password for root Apr 11 08:51:49 port 51106	Brute-Force SSH
🇫🇷 tecnicorioja	2026-04-11 10:00:12 (1 month ago)	Failed password for root Apr 11 10:50:45 port 34410	Brute-Force SSH
🇩🇪 JavaStart	2026-04-11 09:16:07 (1 month ago)	Apr 11 11:15:21 vmi174663 sshd[2176739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 11 11:15:21 vmi174663 sshd[2176739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.5.52 user=root Apr 11 11:15:23 vmi174663 sshd[2176739]: Failed password for root from 27.79.5.52 port 33222 ssh2 Apr 11 11:15:41 vmi174663 sshd[2176743]: Invalid user btf from 27.79.5.52 port 33252 Apr 11 11:16:05 vmi174663 sshd[2176743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.5.52 Apr 11 11:16:07 vmi174663 sshd[2176743]: Failed password for invalid user btf from 27.79.5.52 port 33252 ssh2 ... show less	Brute-Force SSH
🇫🇷 antivirus_5846	2026-04-11 09:15:02 (1 month ago)	Apr 11 11:13:23 hestiacp-tunnel-ip sshd[3037820]: pam_unix(sshd:auth): authentication failure; logna ... show more Apr 11 11:13:23 hestiacp-tunnel-ip sshd[3037820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.5.52 user=root Apr 11 11:13:25 hestiacp-tunnel-ip sshd[3037820]: Failed password for root from 27.79.5.52 port 45828 ssh2 Apr 11 11:14:59 hestiacp-tunnel-ip sshd[3037852]: Invalid user admin from 27.79.5.52 port 54994 Apr 11 11:14:59 hestiacp-tunnel-ip sshd[3037852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.5.52 Apr 11 11:15:01 hestiacp-tunnel-ip sshd[3037852]: Failed password for invalid user admin from 27.79.5.52 port 54994 ssh2 ... show less	Brute-Force SSH
🇫🇷 billy549	2026-04-11 09:14:41 (1 month ago)	2026-04-11T09:10:11.679234+00:00 vps.billy.wales sshd[337525]: Failed password for invalid user ftpu ... show more 2026-04-11T09:10:11.679234+00:00 vps.billy.wales sshd[337525]: Failed password for invalid user ftpuser from 27.79.5.52 port 37504 ssh2 2026-04-11T09:14:32.237392+00:00 vps.billy.wales sshd[337552]: Invalid user rebecca from 27.79.5.52 port 56788 2026-04-11T09:14:32.438935+00:00 vps.billy.wales sshd[337552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.79.5.52 2026-04-11T09:14:33.984567+00:00 vps.billy.wales sshd[337552]: Failed password for invalid user rebecca from 27.79.5.52 port 56788 ssh2 2026-04-11T09:14:40.834560+00:00 vps.billy.wales sshd[337554]: Invalid user btf from 27.79.5.52 port 43306 ... show less	Brute-Force SSH
🇫🇷 Nicolas Rebierre	2026-04-11 09:14:15 (1 month ago)	2026-04-11T11:08:03.066331+02:00 beastie.lan.nrvl.net sshd[2357207]: Invalid user admin from 27.79.5 ... show more 2026-04-11T11:08:03.066331+02:00 beastie.lan.nrvl.net sshd[2357207]: Invalid user admin from 27.79.5.52 port 43070 2026-04-11T11:08:04.851480+02:00 beastie.lan.nrvl.net sshd[2357210]: Invalid user 1234 from 27.79.5.52 port 39140 2026-04-11T11:08:37.906440+02:00 beastie.lan.nrvl.net sshd[2357295]: Invalid user ftpuser from 27.79.5.52 port 46154 2026-04-11T11:12:27.620606+02:00 beastie.lan.nrvl.net sshd[2357818]: Invalid user oracle from 27.79.5.52 port 60300 2026-04-11T11:14:14.830772+02:00 beastie.lan.nrvl.net sshd[2358090]: Invalid user admin from 27.79.5.52 port 47928 ... show less	Brute-Force SSH

Showing 1 to 15 of 246 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.201.203.220

🇺🇸 2607:f8b0:4001:c19::123

🇺🇸 2602:80d:1008::7a

🇳🇱 165.22.200.233

🇺🇸 162.243.167.73

🇨🇳 115.190.197.74

🇨🇳 115.190.69.18

🇻🇳 115.77.111.2

🇨🇳 112.31.93.229

🇧🇪 104.155.115.14

🇺🇸 96.56.228.149

🇮🇹 93.92.79.167

🇳🇱 51.158.160.54

🇮🇳 49.15.125.22

🇳🇱 45.148.10.141

🇧🇷 170.231.252.149

🇰🇷 152.69.232.121

🇧🇷 129.121.33.174

🇨🇳 115.191.73.24

🇰🇷 106.243.155.71