59.34.28.79

MikroTik Enterprise Honeypot

Nov 2 16:59:22 obsidian sshd[3470612]: Failed password for root from 59.34.28.79 port 35542 ssh2 Nov 2 16:59:26 obsidian sshd[3470612]: Failed password for root from 59.34.28.79 port 35542 ssh2 Nov 2 16:59:29 obsidian sshd[3470612]: Failed passwor ... show more Nov 2 16:59:22 obsidian sshd[3470612]: Failed password for root from 59.34.28.79 port 35542 ssh2 Nov 2 16:59:26 obsidian sshd[3470612]: Failed password for root from 59.34.28.79 port 35542 ssh2 Nov 2 16:59:29 obsidian sshd[3470612]: Failed password for root from 59.34.28.79 port 35542 ssh2 ... show less

Cluster member 141.11.100.2 (FR/France/-) said, DENY 59.34.28.79, Reason:[(sshd) Failed SSH login from 59.34.28.79 (CN/China/-): 3 in the last 3600 secs]

Nov 2 07:45:41 login sshd[21411]: Failed password for root from 59.34.28.79 port 60174 ssh2 Nov 2 07:45:52 login sshd[21411]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 60174 ssh2 [preauth] ...

Detected multiple authentication failures and invalid user attempts from IP address 59.34.28.79 on [PT] Lis-2 Node.

Unauthorized connection attempt detected, SSH Brute-Force

Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SSH, failed attempts: 4).

Oct 31 19:08:48 uiravps sshd[1444089]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 49544 ssh2 [preauth] Oct 31 19:08:53 uiravps sshd[1446163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more Oct 31 19:08:48 uiravps sshd[1444089]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 49544 ssh2 [preauth] Oct 31 19:08:53 uiravps sshd[1446163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.34.28.79 user=root Oct 31 19:08:55 uiravps sshd[1446163]: Failed password for root from 59.34.28.79 port 50540 ssh2 ... show less

2026-10-31T18:58:25.891248+00:00 schmittsoft sshd[1911539]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 53840 ssh2 [preauth] 2026-10-31T18:58:30.412048+00:00 schmittsoft sshd[1911582]: error: maximum authentication ... show more 2026-10-31T18:58:25.891248+00:00 schmittsoft sshd[1911539]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 53840 ssh2 [preauth] 2026-10-31T18:58:30.412048+00:00 schmittsoft sshd[1911582]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 54010 ssh2 [preauth] 2026-10-31T18:58:35.431949+00:00 schmittsoft sshd[1911656]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 54232 ssh2 [preauth] ... show less

Wazuh SIEM: 6 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : SSH (Activité Suspecte).

denied SSH access attempt. destination port 22.

SSH login attempts with user root

2026-10-30 23:14:31 UTC Unauthorized activity to TCP port 22. SSH

attempting login on honeypot ssh ...

2026-10-29T10:12:48.128484+02:00 isik-one sshd[553851]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 56176 ssh2 [preauth] 2026-10-29T10:12:55.672330+02:00 isik-one sshd[553859]: error: maximum authentication attempts ... show more 2026-10-29T10:12:48.128484+02:00 isik-one sshd[553851]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 56176 ssh2 [preauth] 2026-10-29T10:12:55.672330+02:00 isik-one sshd[553859]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 56372 ssh2 [preauth] 2026-10-29T10:13:01.174604+02:00 isik-one sshd[553913]: error: maximum authentication attempts exceeded for root from 59.34.28.79 port 56662 ssh2 [preauth] 2026-10-29T10:13:10.807693+02:00 isik-one sshd[553978]: Invalid user admin from 59.34.28.79 port 57028 2026-10-29T10:13:12.230861+02:00 isik-one sshd[553978]: error: maximum authentication attempts exceeded for invalid user admin from 59.34.28.79 port 57028 ssh2 [preauth] ... show less