Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-14T22:22:16.412552+01:00 tarr-firewall sshd[335014]: Invalid user mysql from 103.79.252.255 port 39059
2026-11-14T22:22:39.162420+01:00 tarr-firewall sshd[335053]: Invalid user bm from 103.79.252.255 port 39101
2026-11-14T22:23:01.386472+01:0 ...
show more2026-11-14T22:22:16.412552+01:00 tarr-firewall sshd[335014]: Invalid user mysql from 103.79.252.255 port 39059
2026-11-14T22:22:39.162420+01:00 tarr-firewall sshd[335053]: Invalid user bm from 103.79.252.255 port 39101
2026-11-14T22:23:01.386472+01:00 tarr-firewall sshd[335067]: Invalid user xgx from 103.79.252.255 port 39141
...
show less
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.
Brute-Force
Anonymous
[news.tmg.gr] ssh-invalid-user: logs=/var/log/secure; samples=Nov 13 16:58:50 da sshd-session[690616]: Failed password for root from 103.79.252.255 port 1949 ssh2 | Nov 13 16:59:07 da sshd-session[690658]: Invalid user sahs from 103.79.252.255 port 2 ...
show more[news.tmg.gr] ssh-invalid-user: logs=/var/log/secure; samples=Nov 13 16:58:50 da sshd-session[690616]: Failed password for root from 103.79.252.255 port 1949 ssh2 | Nov 13 16:59:07 da sshd-session[690658]: Invalid user sahs from 103.79.252.255 port 2106 | Nov 13 16:59:09 da sshd-session[690658]: Failed password for invalid user sahs from 103.79.252.255 port 2106 ssh2
show less
2026-11-13T15:59:03.301898+01:00 Torux sshd[2260387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.252.255
2026-11-13T15:59:05.764459+01:00 Torux sshd[2260387]: Failed password for invalid user sahs ...
show more2026-11-13T15:59:03.301898+01:00 Torux sshd[2260387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.252.255
2026-11-13T15:59:05.764459+01:00 Torux sshd[2260387]: Failed password for invalid user sahs from 103.79.252.255 port 6452 ssh2
2026-11-13T15:59:20.521689+01:00 Torux sshd[2260765]: Invalid user jim from 103.79.252.255 port 6533
2026-11-13T15:59:20.683359+01:00 Torux sshd[2260765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.252.255
2026-11-13T15:59:23.146129+01:00 Torux sshd[2260765]: Failed password for invalid user jim from 103.79.252.255 port 6533 ssh2
...
show less
Nov 13 15:59:06 v22019095806697148 sshd[114537]: Invalid user sahs from 103.79.252.255 port 46015
Nov 13 15:59:06 v22019095806697148 sshd[114537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.252.255 ...
show moreNov 13 15:59:06 v22019095806697148 sshd[114537]: Invalid user sahs from 103.79.252.255 port 46015
Nov 13 15:59:06 v22019095806697148 sshd[114537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.252.255
Nov 13 15:59:08 v22019095806697148 sshd[114537]: Failed password for invalid user sahs from 103.79.252.255 port 46015 ssh2
... cvbnet
show less
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Attack Signature Blocked: /brands/grandstream/shopby/iptel_type-nastol_nyj/manufacturer-lifesize-grandstream-rcf-lsi-ask_proxima-projectiondesign-xyz.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 | (Magento Site)
show less
