Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-15T11:36:14.129989propilvipalvelutfi sshd[1122170]: Invalid user alihankinta from 119.42.96.153 port 52848
2026-11-15T11:36:14.976411propilvipalvelutfi sshd[1122170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ...
show more2026-11-15T11:36:14.129989propilvipalvelutfi sshd[1122170]: Invalid user alihankinta from 119.42.96.153 port 52848
2026-11-15T11:36:14.976411propilvipalvelutfi sshd[1122170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.96.153
2026-11-15T11:36:17.846083propilvipalvelutfi sshd[1122170]: Failed password for invalid user alihankinta from 119.42.96.153 port 52848 ssh2
...
show less
Banned by Multi Agent · node …nt20 · attempts=5 · SSH brute-force / scan
Brute-Force
SSH
Anonymous
2026-11-15T19:11:15.986071+11:00 phosphor sshd-session[1388217]: Failed password for invalid user cathode from 119.42.96.153 port 33384 ssh2
2026-11-15T19:13:32.559692+11:00 phosphor sshd-session[1388330]: Connection from 119.42.96.153 port 48042 on ...
show more2026-11-15T19:11:15.986071+11:00 phosphor sshd-session[1388217]: Failed password for invalid user cathode from 119.42.96.153 port 33384 ssh2
2026-11-15T19:13:32.559692+11:00 phosphor sshd-session[1388330]: Connection from 119.42.96.153 port 48042 on 163.227.128.186 port 22 rdomain ""
2026-11-15T19:13:32.970817+11:00 phosphor sshd-session[1388330]: Invalid user cathode from 119.42.96.153 port 48042
...
show less
2026-11-15T08:24:37.559555+01:00 web5 sshd[3266652]: Failed password for root from 119.42.96.153 port 53450 ssh2
2026-11-15T09:03:58.510296+01:00 web5 sshd[3276230]: User web5 from 119.42.96.153 not allowed because none of user's groups are listed in ...
show more2026-11-15T08:24:37.559555+01:00 web5 sshd[3266652]: Failed password for root from 119.42.96.153 port 53450 ssh2
2026-11-15T09:03:58.510296+01:00 web5 sshd[3276230]: User web5 from 119.42.96.153 not allowed because none of user's groups are listed in AllowGroups
...
show less
Nov 15 08:41:12 <server> sshd\[23571\]: User root from 119.42.96.153 not allowed because not listed in AllowUsersNov 15 08:41:15 <server> sshd\[23571\]: Failed password for invalid user root from 119.42.96.153 port 53978 ssh2
...
2026-11-15T06:45:52.001655+01:00 donarev419.com sshd[898983]: Invalid user ubuntu from 119.42.96.153 port 38512
...
Brute-Force
SSH
Anonymous
119.42.96.153 (TH/Thailand/-), 7 distributed sshd attacks on account [magi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 15 00:36:12 server5 sshd[27116]: Invalid user magi from 159.192.137.133
Nov 15 00:36:14 s ...
show more119.42.96.153 (TH/Thailand/-), 7 distributed sshd attacks on account [magi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 15 00:36:12 server5 sshd[27116]: Invalid user magi from 159.192.137.133
Nov 15 00:36:14 server5 sshd[27116]: Failed password for invalid user magi from 159.192.137.133 port 37456 ssh2
Nov 15 00:18:49 server5 sshd[23194]: Invalid user magi from 212.83.141.109
Nov 15 00:18:50 server5 sshd[23194]: Failed password for invalid user magi from 212.83.141.109 port 60936 ssh2
Nov 15 00:30:18 server5 sshd[25774]: Invalid user magi from 185.86.78.61
Nov 15 00:30:21 server5 sshd[25774]: Failed password for invalid user magi from 185.86.78.61 port 41864 ssh2
Nov 15 00:41:45 server5 sshd[29168]: Invalid user magi from 119.42.96.153
IP Addresses Blocked:
159.192.137.133 (TH/Thailand/-)
212.83.141.109 (FR/France/-)
185.86.78.61 (UA/Ukraine/-)
show less
Nov 15 01:36:45 <server> sshd\[438\]: Invalid user ssdszerver from 119.42.96.153Nov 15 01:36:46 <server> sshd\[438\]: Failed password for invalid user ssdszerver from 119.42.96.153 port 56860 ssh2
...
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
