Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-12T05:15:47.510230+02:00 ns1 sshd-session[181078]: User root not allowed because account is locked
2026-11-12T05:15:47.574016+02:00 ns1 sshd-session[181078]: Connection closed by invalid user root 92.40.184.79 port 5237 [preauth]
2026-11-12T0 ...
show more2026-11-12T05:15:47.510230+02:00 ns1 sshd-session[181078]: User root not allowed because account is locked
2026-11-12T05:15:47.574016+02:00 ns1 sshd-session[181078]: Connection closed by invalid user root 92.40.184.79 port 5237 [preauth]
2026-11-12T05:16:27.751646+02:00 ns1 sshd-session[181128]: Invalid user user from 92.40.184.79 port 2407
2026-11-12T05:16:28.715381+02:00 ns1 sshd-session[181130]: Invalid user demo from 92.40.184.79 port 12975
2026-11-12T05:16:29.200224+02:00 ns1 sshd-session[181132]: Invalid user deploy from 92.40.184.79 port 52271
...
show less
2026-11-12T10:24:31.025655+08:00 localhost sshd-session[13223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.40.184.79
2026-11-12T10:24:32.869246+08:00 localhost sshd-session[13223]: Failed password for i ...
show more2026-11-12T10:24:31.025655+08:00 localhost sshd-session[13223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.40.184.79
2026-11-12T10:24:32.869246+08:00 localhost sshd-session[13223]: Failed password for invalid user postgres from 92.40.184.79 port 44314 ssh2
2026-11-12T10:25:27.883388+08:00 localhost sshd-session[13227]: Invalid user deploy from 92.40.184.79 port 19760
...
show less
Aug 31 06:37:13 CVM46267 sshd[1334441]: Failed password for root from 92.40.184.79 port 8801 ssh2
Aug 31 06:39:02 CVM46267 sshd[1334707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.40.184.79 user=root
...
show moreAug 31 06:37:13 CVM46267 sshd[1334441]: Failed password for root from 92.40.184.79 port 8801 ssh2
Aug 31 06:39:02 CVM46267 sshd[1334707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.40.184.79 user=root
Aug 31 06:39:05 CVM46267 sshd[1334707]: Failed password for root from 92.40.184.79 port 53321 ssh2
...
show less
92.40.184.79 - - [27/Mar/2026:07:40:06 +0000] "GET /api/images/ HTTP/2.0" 401 16 "https://proteushop.com/" "Mozilla/5.0 (Linux; Android 11; SM-A217F Build/RP1A.200720.012; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/94.0.4606.85 Mob ...
show more92.40.184.79 - - [27/Mar/2026:07:40:06 +0000] "GET /api/images/ HTTP/2.0" 401 16 "https://proteushop.com/" "Mozilla/5.0 (Linux; Android 11; SM-A217F Build/RP1A.200720.012; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/94.0.4606.85 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/367.2.0.26.107;]"
show less
Brute-Force
Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp