Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: M1

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
27.104.246.43 attackbots
xmlrpc attack
2020-06-29 20:20:40
27.104.228.198 attack
Honeypot attack, port: 81, PTR: 198.228.104.27.unknown.m1.com.sg.
2020-03-03 17:18:13
27.104.244.146 attack
Honeypot attack, port: 5555, PTR: 146.244.104.27.unknown.m1.com.sg.
2020-02-06 19:59:43
27.104.221.244 attack
27.104.221.244 was recorded 16 times by 1 hosts attempting to connect to the following ports: 51413. Incident counter (4h, 24h, all-time): 16, 50, 50
2019-11-26 02:10:24
27.104.217.69 attack
Automatic report - Port Scan Attack
2019-10-19 04:58:25
27.104.208.151 attack
SSH-bruteforce attempts
2019-10-16 16:10:10
27.104.208.151 attackspambots
Lines containing failures of 27.104.208.151
Oct 10 06:32:48 myhost sshd[2516]: Invalid user pi from 27.104.208.151 port 50328
Oct 10 06:32:48 myhost sshd[2515]: Invalid user pi from 27.104.208.151 port 50324
Oct 10 06:32:48 myhost sshd[2516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151
Oct 10 06:32:48 myhost sshd[2515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.104.208.151
2019-10-10 15:30:57
27.104.24.1 attack
Aug 28 23:51:18 MK-Soft-VM7 sshd\[9282\]: Invalid user admin from 27.104.24.1 port 52580
Aug 28 23:51:18 MK-Soft-VM7 sshd\[9282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.24.1
Aug 28 23:51:20 MK-Soft-VM7 sshd\[9282\]: Failed password for invalid user admin from 27.104.24.1 port 52580 ssh2
...
2019-08-29 10:46:04
27.104.248.27 attackspambots
20 attempts against mh-ssh on plane.magehost.pro
2019-07-15 03:48:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.104.2.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;27.104.2.147.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 08:02:21 CST 2025
;; MSG SIZE  rcvd: 105
Host info
147.2.104.27.in-addr.arpa domain name pointer 147.2.104.27.unknown.m1.com.sg.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.2.104.27.in-addr.arpa	name = 147.2.104.27.unknown.m1.com.sg.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
187.19.10.220 attackspam
Sep 15 18:36:12 mail.srvfarm.net postfix/smtpd[2805904]: warning: unknown[187.19.10.220]: SASL PLAIN authentication failed: 
Sep 15 18:36:13 mail.srvfarm.net postfix/smtpd[2805904]: lost connection after AUTH from unknown[187.19.10.220]
Sep 15 18:36:46 mail.srvfarm.net postfix/smtps/smtpd[2817591]: warning: unknown[187.19.10.220]: SASL PLAIN authentication failed: 
Sep 15 18:36:46 mail.srvfarm.net postfix/smtps/smtpd[2817591]: lost connection after AUTH from unknown[187.19.10.220]
Sep 15 18:41:02 mail.srvfarm.net postfix/smtps/smtpd[2827818]: warning: unknown[187.19.10.220]: SASL PLAIN authentication failed:
2020-09-17 02:32:24
51.83.42.108 attackspam
(sshd) Failed SSH login from 51.83.42.108 (FR/France/108.ip-51-83-42.eu): 5 in the last 3600 secs
2020-09-17 02:10:16
211.104.20.145 attackspambots
Time:     Mon Sep 14 21:40:23 2020 +0000
IP:       211.104.20.145 (KR/South Korea/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 14 21:38:03 ca-47-ede1 sshd[86049]: Did not receive identification string from 211.104.20.145 port 40294
Sep 14 21:40:08 ca-47-ede1 sshd[86080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.104.20.145  user=root
Sep 14 21:40:09 ca-47-ede1 sshd[86080]: Failed password for root from 211.104.20.145 port 49928 ssh2
Sep 14 21:40:21 ca-47-ede1 sshd[86084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.104.20.145  user=root
Sep 14 21:40:22 ca-47-ede1 sshd[86084]: Failed password for root from 211.104.20.145 port 25020 ssh2
2020-09-17 02:17:08
162.241.65.44 attackspam
Mailserver and mailaccount attacks
2020-09-17 02:07:08
178.128.45.173 attack
" "
2020-09-17 02:17:23
188.92.209.136 attackspam
Sep 15 18:40:40 mail.srvfarm.net postfix/smtpd[2827692]: warning: unknown[188.92.209.136]: SASL PLAIN authentication failed: 
Sep 15 18:40:41 mail.srvfarm.net postfix/smtpd[2827692]: lost connection after AUTH from unknown[188.92.209.136]
Sep 15 18:45:54 mail.srvfarm.net postfix/smtpd[2825414]: warning: unknown[188.92.209.136]: SASL PLAIN authentication failed: 
Sep 15 18:45:54 mail.srvfarm.net postfix/smtpd[2825414]: lost connection after AUTH from unknown[188.92.209.136]
Sep 15 18:46:41 mail.srvfarm.net postfix/smtpd[2828192]: warning: unknown[188.92.209.136]: SASL PLAIN authentication failed:
2020-09-17 02:30:56
51.77.200.24 attackspambots
Sep 16 13:38:54 *** sshd[2888]: User root from 51.77.200.24 not allowed because not listed in AllowUsers
2020-09-17 02:05:41
111.227.233.75 attack
 TCP (SYN) 111.227.233.75:31192 -> port 8080, len 40
2020-09-17 02:13:46
74.214.208.19 attack
Brute forcing email accounts
2020-09-17 01:58:53
46.101.114.250 attackbotsspam
2020-09-16T01:04:41.096983hostname sshd[106272]: Failed password for root from 46.101.114.250 port 58408 ssh2
...
2020-09-17 02:21:12
45.95.119.232 attack
Registration form abuse
2020-09-17 02:18:54
51.91.212.81 attack
TCP ports : 5800 / 8082
2020-09-17 02:19:38
35.0.127.52 attackbotsspam
Multiple SSH login attempts.
2020-09-17 02:05:01
47.30.157.149 attack
C1,WP GET /wp-login.php
2020-09-17 02:25:16
49.234.41.108 attack
Sep 16 07:38:03 vps-51d81928 sshd[103488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.41.108 
Sep 16 07:38:03 vps-51d81928 sshd[103488]: Invalid user minecraft from 49.234.41.108 port 56136
Sep 16 07:38:05 vps-51d81928 sshd[103488]: Failed password for invalid user minecraft from 49.234.41.108 port 56136 ssh2
Sep 16 07:40:42 vps-51d81928 sshd[103544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.41.108  user=root
Sep 16 07:40:45 vps-51d81928 sshd[103544]: Failed password for root from 49.234.41.108 port 60366 ssh2
...
2020-09-17 02:27:38

Recently Reported IPs

56.236.8.6 140.118.181.7 117.147.161.214 152.114.178.101
94.199.202.225 198.208.134.49 186.97.152.221 225.14.48.115
39.250.120.10 33.70.152.58 215.132.58.49 149.13.52.126
197.49.31.107 92.63.59.233 118.127.163.113 138.209.119.82
153.28.107.166 212.139.163.144 203.228.146.203 92.250.67.218