Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 12 04:03:22 fell sshd[914033]: User root from 111.199.109.78 not allowed because not listed in AllowUsers
Nov 12 04:03:40 fell sshd[914035]: User root from 111.199.109.78 not allowed because not listed in AllowUsers
Nov 12 04:03:56 fell sshd[9140 ...
show moreNov 12 04:03:22 fell sshd[914033]: User root from 111.199.109.78 not allowed because not listed in AllowUsers
Nov 12 04:03:40 fell sshd[914035]: User root from 111.199.109.78 not allowed because not listed in AllowUsers
Nov 12 04:03:56 fell sshd[914066]: Invalid user xj from 111.199.109.78 port 22313
...
show less
2026-11-09T14:32:03.197363+00:00 main sshd[4106018]: Invalid user yus from 111.199.109.78 port 21796
2026-11-09T14:32:22.192329+00:00 main sshd[4106063]: Invalid user fish from 111.199.109.78 port 22504
2026-11-09T14:32:38.770240+00:00 main sshd[4106 ...
show more2026-11-09T14:32:03.197363+00:00 main sshd[4106018]: Invalid user yus from 111.199.109.78 port 21796
2026-11-09T14:32:22.192329+00:00 main sshd[4106063]: Invalid user fish from 111.199.109.78 port 22504
2026-11-09T14:32:38.770240+00:00 main sshd[4106077]: Invalid user webmaster from 111.199.109.78 port 23065
2026-11-09T14:32:55.963998+00:00 main sshd[4106082]: Invalid user username from 111.199.109.78 port 21552
2026-11-09T14:33:12.142037+00:00 main sshd[4106165]: Invalid user tele from 111.199.109.78 port 22182
...
show less
2026-11-09T08:08:25.222219+02:00 mail sshd-session[929858]: Invalid user git03 from 111.199.109.78 port 23214
2026-11-09T08:08:43.471518+02:00 mail sshd-session[930029]: Invalid user parker from 111.199.109.78 port 21815
2026-11-09T08:09:17.871031+02 ...
show more2026-11-09T08:08:25.222219+02:00 mail sshd-session[929858]: Invalid user git03 from 111.199.109.78 port 23214
2026-11-09T08:08:43.471518+02:00 mail sshd-session[930029]: Invalid user parker from 111.199.109.78 port 21815
2026-11-09T08:09:17.871031+02:00 mail sshd-session[930296]: Invalid user sylvia from 111.199.109.78 port 23087
2026-11-09T08:09:33.997968+02:00 mail sshd-session[930668]: Invalid user warrior from 111.199.109.78 port 21646
...
show less
2026-11-07T17:59:29.771752srv sshd[17226]: Invalid user lts from 111.199.109.78 port 21634
2026-11-07T17:59:44.939075srv sshd[18043]: Invalid user kempff from 111.199.109.78 port 22737
2026-11-07T17:59:58.662717srv sshd[18400]: Invalid user jianmao f ...
show more2026-11-07T17:59:29.771752srv sshd[17226]: Invalid user lts from 111.199.109.78 port 21634
2026-11-07T17:59:44.939075srv sshd[18043]: Invalid user kempff from 111.199.109.78 port 22737
2026-11-07T17:59:58.662717srv sshd[18400]: Invalid user jianmao from 111.199.109.78 port 23516
2026-11-07T18:00:12.780380srv sshd[18618]: Invalid user xlj from 111.199.109.78 port 22296
2026-11-07T18:00:27.729168srv sshd[18950]: Invalid user yjw from 111.199.109.78 port 22985
...
show less
2026-11-06T15:20:36.690974+02:00 h03 sshd[1298401]: Invalid user tele from 111.199.109.78 port 22381
2026-11-06T15:20:57.479934+02:00 h03 sshd[1306994]: Invalid user guest from 111.199.109.78 port 23171
2026-11-06T15:21:16.721096+02:00 h03 sshd[13158 ...
show more2026-11-06T15:20:36.690974+02:00 h03 sshd[1298401]: Invalid user tele from 111.199.109.78 port 22381
2026-11-06T15:20:57.479934+02:00 h03 sshd[1306994]: Invalid user guest from 111.199.109.78 port 23171
2026-11-06T15:21:16.721096+02:00 h03 sshd[1315878]: Invalid user ubuntu from 111.199.109.78 port 21860
2026-11-06T15:21:38.816398+02:00 h03 sshd[1325294]: Invalid user tron from 111.199.109.78 port 22504
2026-11-06T15:21:55.837561+02:00 h03 sshd[1332211]: Invalid user owncloud from 111.199.109.78 port 23127
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Nov 3 13:00:35 mail sshd[1418221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.199.109.78 user=root
Nov 3 13:00:37 mail sshd[1418221]: Failed password for root from 111.199.109.78 port 22151 ssh2
Nov ...
show moreNov 3 13:00:35 mail sshd[1418221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.199.109.78 user=root
Nov 3 13:00:37 mail sshd[1418221]: Failed password for root from 111.199.109.78 port 22151 ssh2
Nov 3 13:00:58 mail sshd[1418232]: Invalid user thbin from 111.199.109.78 port 22900
...
show less
