This IP address has been reported a total of
147
times from
134 distinct
sources.
104.199.27.11 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 34
reports;
United States of America
with 27
reports;
France
with 15
reports.
The most common categories in these recent reports were:
SSH
135
times;
Brute-Force
122
times;
Port Scan
21
times;
Hacking
10
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 37 port scanning attempts on 27-10-2026. For more information or to repo ...
show moreThis IP address carried out 37 port scanning attempts on 27-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 27-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 27-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-27T10:15:46.172901+02:00 v1791714433 sshd-session[20183]: Invalid user admin from 104.199.27 ...
show more2026-10-27T10:15:46.172901+02:00 v1791714433 sshd-session[20183]: Invalid user admin from 104.199.27.11 port 2402
...
show less
Oct 27 01:32:46 mortgagebase sshd[17490]: Unable to negotiate with 104.199.27.11 port 53078: no matc ...
show moreOct 27 01:32:46 mortgagebase sshd[17490]: Unable to negotiate with 104.199.27.11 port 53078: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
Oct 27 01:32:47 mortgagebase sshd[17493]: Unable to negotiate with 104.199.27.11 port 53096: no matching host key type found. Their offer: ssh-dss [preauth]
Oct 27 01:32:48 mortgagebase sshd[17499]: Unable to negotiate with 104.199.27.11 port 53124: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
Oct 27 01:32:49 mortgagebase sshd[17501]: Unable to negotiate with 104.199.27.11 port 53130: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
Oct 27 01:32:50 mortgagebase sshd[17505]: Invalid user tdtjp from 104.199.27.11 port 53148
...
show less
2026-10-27 08:03:56,471 fail2ban.actions [938]: NOTICE [sshd] Ban 104.199.27.11
...
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
2026-10-27T08:02:28.524859+01:00 my-vps sshd[335382]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-27T08:02:28.524859+01:00 my-vps sshd[335382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.199.27.11
2026-10-27T08:02:30.734694+01:00 my-vps sshd[335382]: Failed password for invalid user admin from 104.199.27.11 port 12236 ssh2
...
show less
