Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-14T02:13:47.771916+02:00 sshadmin sshd-session[145873]: Invalid user zyx from 115.79.34.224 port 48778
2026-11-14T02:14:36.631616+02:00 sshadmin sshd-session[145882]: Invalid user user from 115.79.34.224 port 42102
2026-11-14T02:14:50.473819+ ...
show more2026-11-14T02:13:47.771916+02:00 sshadmin sshd-session[145873]: Invalid user zyx from 115.79.34.224 port 48778
2026-11-14T02:14:36.631616+02:00 sshadmin sshd-session[145882]: Invalid user user from 115.79.34.224 port 42102
2026-11-14T02:14:50.473819+02:00 sshadmin sshd-session[145884]: Invalid user omm from 115.79.34.224 port 43060
2026-11-14T02:15:17.735232+02:00 sshadmin sshd-session[145893]: Invalid user wangyu from 115.79.34.224 port 33442
2026-11-14T02:15:31.116265+02:00 sshadmin sshd-session[145898]: Invalid user jira3 from 115.79.34.224 port 54890
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
SSH login attempts on non-standard port (fail2ban)
Brute-Force
SSH
Anonymous
2026-11-06T14:43:55.932850 vmi2293746.contaboserver.net sshd[62803]: Invalid user toor from 115.79.34.224 port 41534
2026-11-06T14:44:44.528689 vmi2293746.contaboserver.net sshd[62809]: Invalid user mason from 115.79.34.224 port 49442
...
2026-11-05T12:00:53.306506+02:00 luna sshd-session[2325515]: Invalid user zqdemo from 115.79.34.224 port 34480
2026-11-05T12:01:13.853808+02:00 luna sshd-session[2325732]: Invalid user demo from 115.79.34.224 port 48614
2026-11-05T12:01:32.207447+02: ...
show more2026-11-05T12:00:53.306506+02:00 luna sshd-session[2325515]: Invalid user zqdemo from 115.79.34.224 port 34480
2026-11-05T12:01:13.853808+02:00 luna sshd-session[2325732]: Invalid user demo from 115.79.34.224 port 48614
2026-11-05T12:01:32.207447+02:00 luna sshd-session[2325940]: Invalid user test from 115.79.34.224 port 34394
2026-11-05T12:02:24.215916+02:00 luna sshd-session[2326520]: Invalid user groupe from 115.79.34.224 port 56930
2026-11-05T12:02:39.372532+02:00 luna sshd-session[2326643]: Invalid user zhouxy from 115.79.34.224 port 52460
2026-11-05T12:02:54.084768+02:00 luna sshd-session[2326845]: Invalid user liuyj from 115.79.34.224 port 34104
2026-11-05T12:03:08.634428+02:00 luna sshd-session[2326969]: Invalid user sbb from 115.79.34.224 port 33116
2026-11-05T12:03:22.703117+02:00 luna sshd-session[2327197]: Invalid user zhangxian from 115.79.34.224 port 44742
2026-11-05T12:03:36.498870+02:00 luna sshd-session[2327285]: Invalid user jimmy from 115.79.34.224 port 53872
2026-11
...
show less
2026-11-03T01:52:20.865007+03:00 ns1 sshd-session[939834]: Invalid user tyk from 115.79.34.224 port 42418
2026-11-03T01:52:36.268878+03:00 ns1 sshd-session[939837]: Invalid user xueys from 115.79.34.224 port 50586
2026-11-03T01:52:51.176825+03:00 ns1 ...
show more2026-11-03T01:52:20.865007+03:00 ns1 sshd-session[939834]: Invalid user tyk from 115.79.34.224 port 42418
2026-11-03T01:52:36.268878+03:00 ns1 sshd-session[939837]: Invalid user xueys from 115.79.34.224 port 50586
2026-11-03T01:52:51.176825+03:00 ns1 sshd-session[939841]: User root not allowed because account is locked
2026-11-03T01:52:51.433802+03:00 ns1 sshd-session[939841]: Connection closed by invalid user root 115.79.34.224 port 40664 [preauth]
2026-11-03T01:53:18.693921+03:00 ns1 sshd-session[939880]: Invalid user deploy from 115.79.34.224 port 57574
...
show less