City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: M1
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 27.104.246.43 | attackbots | xmlrpc attack |
2020-06-29 20:20:40 |
| 27.104.228.198 | attack | Honeypot attack, port: 81, PTR: 198.228.104.27.unknown.m1.com.sg. |
2020-03-03 17:18:13 |
| 27.104.244.146 | attack | Honeypot attack, port: 5555, PTR: 146.244.104.27.unknown.m1.com.sg. |
2020-02-06 19:59:43 |
| 27.104.221.244 | attack | 27.104.221.244 was recorded 16 times by 1 hosts attempting to connect to the following ports: 51413. Incident counter (4h, 24h, all-time): 16, 50, 50 |
2019-11-26 02:10:24 |
| 27.104.217.69 | attack | Automatic report - Port Scan Attack |
2019-10-19 04:58:25 |
| 27.104.208.151 | attack | SSH-bruteforce attempts |
2019-10-16 16:10:10 |
| 27.104.208.151 | attackspambots | Lines containing failures of 27.104.208.151 Oct 10 06:32:48 myhost sshd[2516]: Invalid user pi from 27.104.208.151 port 50328 Oct 10 06:32:48 myhost sshd[2515]: Invalid user pi from 27.104.208.151 port 50324 Oct 10 06:32:48 myhost sshd[2516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151 Oct 10 06:32:48 myhost sshd[2515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.104.208.151 |
2019-10-10 15:30:57 |
| 27.104.24.1 | attack | Aug 28 23:51:18 MK-Soft-VM7 sshd\[9282\]: Invalid user admin from 27.104.24.1 port 52580 Aug 28 23:51:18 MK-Soft-VM7 sshd\[9282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.24.1 Aug 28 23:51:20 MK-Soft-VM7 sshd\[9282\]: Failed password for invalid user admin from 27.104.24.1 port 52580 ssh2 ... |
2019-08-29 10:46:04 |
| 27.104.248.27 | attackspambots | 20 attempts against mh-ssh on plane.magehost.pro |
2019-07-15 03:48:47 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.104.2.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;27.104.2.147. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 08:02:21 CST 2025
;; MSG SIZE rcvd: 105147.2.104.27.in-addr.arpa domain name pointer 147.2.104.27.unknown.m1.com.sg.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.2.104.27.in-addr.arpa name = 147.2.104.27.unknown.m1.com.sg.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.206.148 | attack | Aug 14 23:13:24 friendsofhawaii sshd\[1038\]: Invalid user orauat from 106.12.206.148 Aug 14 23:13:24 friendsofhawaii sshd\[1038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.206.148 Aug 14 23:13:26 friendsofhawaii sshd\[1038\]: Failed password for invalid user orauat from 106.12.206.148 port 52834 ssh2 Aug 14 23:19:17 friendsofhawaii sshd\[1513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.206.148 user=www-data Aug 14 23:19:19 friendsofhawaii sshd\[1513\]: Failed password for www-data from 106.12.206.148 port 43638 ssh2 |
2019-08-15 17:27:32 |
| 213.21.67.184 | attack | Aug 15 09:29:50 unicornsoft sshd\[13552\]: Invalid user test2 from 213.21.67.184 Aug 15 09:29:50 unicornsoft sshd\[13552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.21.67.184 Aug 15 09:29:52 unicornsoft sshd\[13552\]: Failed password for invalid user test2 from 213.21.67.184 port 58415 ssh2 |
2019-08-15 17:37:36 |
| 103.90.224.155 | attackbots | Sql/code injection probe |
2019-08-15 17:26:24 |
| 139.59.238.188 | attackbotsspam | Aug 14 09:23:22 mxgate1 postfix/postscreen[29391]: CONNECT from [139.59.238.188]:44472 to [176.31.12.44]:25 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29393]: addr 139.59.238.188 listed by domain cbl.abuseat.org as 127.0.0.2 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29392]: addr 139.59.238.188 listed by domain zen.spamhaus.org as 127.0.0.3 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29392]: addr 139.59.238.188 listed by domain zen.spamhaus.org as 127.0.0.4 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29394]: addr 139.59.238.188 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29395]: addr 139.59.238.188 listed by domain bl.spamcop.net as 127.0.0.2 Aug 14 09:23:22 mxgate1 postfix/dnsblog[29399]: addr 139.59.238.188 listed by domain b.barracudacentral.org as 127.0.0.2 Aug 14 09:23:28 mxgate1 postfix/postscreen[29391]: DNSBL rank 6 for [139.59.238.188]:44472 Aug 14 09:23:29 mxgate1 postfix/postscreen[29391]: NOQUEUE: reject: RCPT from [139.59.238........ ------------------------------- |
2019-08-15 18:28:18 |
| 148.72.208.74 | attack | Automatic report - Banned IP Access |
2019-08-15 17:42:12 |
| 207.46.13.146 | attack | Automatic report - Banned IP Access |
2019-08-15 18:16:23 |
| 165.22.101.189 | attackspam | Aug 15 05:55:31 xtremcommunity sshd\[2112\]: Invalid user user4 from 165.22.101.189 port 51836 Aug 15 05:55:31 xtremcommunity sshd\[2112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.101.189 Aug 15 05:55:33 xtremcommunity sshd\[2112\]: Failed password for invalid user user4 from 165.22.101.189 port 51836 ssh2 Aug 15 06:00:45 xtremcommunity sshd\[2373\]: Invalid user teamspeak from 165.22.101.189 port 47030 Aug 15 06:00:45 xtremcommunity sshd\[2373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.101.189 ... |
2019-08-15 18:17:47 |
| 111.231.112.36 | attackbotsspam | Aug 15 02:32:27 xtremcommunity sshd\[25735\]: Invalid user ft from 111.231.112.36 port 56444 Aug 15 02:32:27 xtremcommunity sshd\[25735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.112.36 Aug 15 02:32:30 xtremcommunity sshd\[25735\]: Failed password for invalid user ft from 111.231.112.36 port 56444 ssh2 Aug 15 02:39:15 xtremcommunity sshd\[26038\]: Invalid user developer from 111.231.112.36 port 46592 Aug 15 02:39:15 xtremcommunity sshd\[26038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.112.36 ... |
2019-08-15 17:29:31 |
| 206.81.8.14 | attackspambots | 2019-08-15T09:29:37.719493abusebot-6.cloudsearch.cf sshd\[29465\]: Invalid user dstserver from 206.81.8.14 port 54856 |
2019-08-15 17:53:51 |
| 94.141.60.243 | attack | [portscan] Port scan |
2019-08-15 17:21:54 |
| 93.102.197.65 | attackspambots | Aug 14 07:20:01 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.197.65 port 42202 ssh2 (target: 192.99.147.166:22, password: r.r) Aug 14 07:20:03 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.197.65 port 42259 ssh2 (target: 192.99.147.166:22, password: admin) Aug 14 07:20:04 wildwolf ssh-honeypotd[26164]: Failed password for ubnt from 93.102.197.65 port 42301 ssh2 (target: 192.99.147.166:22, password: ubnt) Aug 14 07:20:06 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.197.65 port 42348 ssh2 (target: 192.99.147.166:22, password: 123) Aug 14 07:20:08 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.197.65 port 42385 ssh2 (target: 192.99.147.166:22, password: 1234) Aug 14 07:20:09 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.197.65 port 42423 ssh2 (target: 192.99.147.166:22, password: 12345) Aug 14 07:20:11 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 93.102.1........ ------------------------------ |
2019-08-15 18:18:18 |
| 190.0.22.66 | attackspam | 2019-08-15 08:58:08,445 fail2ban.actions [1115]: NOTICE [sshd] Ban 190.0.22.66 2019-08-15 10:14:10,436 fail2ban.actions [1115]: NOTICE [sshd] Ban 190.0.22.66 2019-08-15 11:29:04,504 fail2ban.actions [1115]: NOTICE [sshd] Ban 190.0.22.66 ... |
2019-08-15 18:26:08 |
| 23.19.32.223 | attack | 23.19.32.223 - - [15/Aug/2019:04:52:50 -0400] "GET /?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&linkID=10296 HTTP/1.1" 200 17665 "https://faucetsupply.com/?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&linkID=10296" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-08-15 17:59:40 |
| 75.117.194.100 | attack | Aug 14 06:50:05 sanyalnet-awsem3-1 sshd[12193]: Connection from 75.117.194.100 port 52966 on 172.30.0.184 port 22 Aug 14 06:50:05 sanyalnet-awsem3-1 sshd[12193]: Invalid user postgres from 75.117.194.100 Aug 14 06:50:08 sanyalnet-awsem3-1 sshd[12193]: Failed password for invalid user postgres from 75.117.194.100 port 52966 ssh2 Aug 14 06:50:08 sanyalnet-awsem3-1 sshd[12193]: Received disconnect from 75.117.194.100: 11: Bye Bye [preauth] Aug 14 07:00:22 sanyalnet-awsem3-1 sshd[13361]: Connection from 75.117.194.100 port 49694 on 172.30.0.184 port 22 Aug 14 07:00:22 sanyalnet-awsem3-1 sshd[13361]: Invalid user gp from 75.117.194.100 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=75.117.194.100 |
2019-08-15 17:56:36 |
| 222.186.42.94 | attack | Aug 15 00:29:44 lcprod sshd\[1479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root Aug 15 00:29:47 lcprod sshd\[1479\]: Failed password for root from 222.186.42.94 port 59978 ssh2 Aug 15 00:29:52 lcprod sshd\[1493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root Aug 15 00:29:54 lcprod sshd\[1493\]: Failed password for root from 222.186.42.94 port 17652 ssh2 Aug 15 00:30:00 lcprod sshd\[1506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root |
2019-08-15 18:41:39 |