Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-14T08:17:31.825963-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
2026-11-14T08:17:35.883013-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 ...
show more2026-11-14T08:17:31.825963-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
2026-11-14T08:17:35.883013-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
2026-11-14T08:17:40.339578-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
2026-11-14T08:17:46.860988-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
2026-11-14T08:17:50.109992-03:00 server4.dr2.site sshd-session[2253076]: Failed password for root from 178.204.27.13 port 54212 ssh2
...
show less
2026-11-14T11:55:49.405351pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:55:52.210139pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:55:5 ...
show more2026-11-14T11:55:49.405351pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:55:52.210139pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:55:56.767441pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:56:00.781107pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
2026-11-14T11:56:04.669292pantelemone.ru sshd[2530338]: Failed password for root from 178.204.27.13 port 58034 ssh2
...
show less
(sshd) Failed SSH login from 178.204.27.13 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 14 07:13:31 web02 sshd[2515174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ...
show more(sshd) Failed SSH login from 178.204.27.13 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 14 07:13:31 web02 sshd[2515174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.204.27.13 user=root
Nov 14 07:13:33 web02 sshd[2515174]: Failed password for root from 178.204.27.13 port 48022 ssh2
Nov 14 07:13:38 web02 sshd[2515174]: Failed password for root from 178.204.27.13 port 48022 ssh2
Nov 14 07:13:41 web02 sshd[2515174]: Failed password for root from 178.204.27.13 port 48022 ssh2
Nov 14 07:13:45 web02 sshd[2515174]: Failed password for root from 178.204.27.13 port 48022 ssh2
show less
Key-only SSH: password presented, none accepted (TCP/22).
Handshake completed; this is not a SYN-only guess.
jail=sshd proto=tcp port=22 failures>=5 users=admin method=invalid-user
auth_result=none_succeeded password_auth=disabled_on_host
when=2026- ...
show moreKey-only SSH: password presented, none accepted (TCP/22).
Handshake completed; this is not a SYN-only guess.
jail=sshd proto=tcp port=22 failures>=5 users=admin method=invalid-user
auth_result=none_succeeded password_auth=disabled_on_host
when=2026-11-13T23:29:51Z sensor=fail2ban role=public-sshd
src=178.204.27.13
show less
2026-11-13T17:44:45.389056-05:00 compotron2 sshd[1461485]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 50355 ssh2 [preauth]
2026-11-13T17:44:57.027243-05:00 compotron2 sshd[1461622]: error: maximum authentication ...
show more2026-11-13T17:44:45.389056-05:00 compotron2 sshd[1461485]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 50355 ssh2 [preauth]
2026-11-13T17:44:57.027243-05:00 compotron2 sshd[1461622]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 51177 ssh2 [preauth]
2026-11-13T17:45:08.635328-05:00 compotron2 sshd[1461759]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 51456 ssh2 [preauth]
2026-11-13T17:45:27.688303-05:00 compotron2 sshd[1462041]: Invalid user admin from 178.204.27.13 port 51755
2026-11-13T17:45:33.886416-05:00 compotron2 sshd[1462041]: error: maximum authentication attempts exceeded for invalid user admin from 178.204.27.13 port 51755 ssh2 [preauth]
...
show less
2026-11-13T21:46:55.668880+00:00 web sshd[1126264]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 41893 ssh2 [preauth]
2026-11-13T21:47:07.750125+00:00 web sshd[1126275]: error: maximum authentication attempts excee ...
show more2026-11-13T21:46:55.668880+00:00 web sshd[1126264]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 41893 ssh2 [preauth]
2026-11-13T21:47:07.750125+00:00 web sshd[1126275]: error: maximum authentication attempts exceeded for root from 178.204.27.13 port 42077 ssh2 [preauth]
...
show less
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown