This IP address has been reported a total of
45
times from
38 distinct
sources.
119.42.96.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-10T11:15:39.221380 localhost.localdomain sshd[1860402]: pam_unix(sshd:auth): authentication ...
show more2026-06-10T11:15:39.221380 localhost.localdomain sshd[1860402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.96.252 user=root
2026-06-10T11:15:41.657234 localhost.localdomain sshd[1860402]: Failed password for root from 119.42.96.252 port 38744 ssh2
...
show less
Level: (LOW): Known Attacker via Cowrie IOC Country: Thailand 1x -> Target Country: Frankreich SSH
Hacking
Brute-Force
SSH
Anonymous
2026-06-10T09:04:22.315696+02:00 debian sshd-session[2104444]: Invalid user deploy from 119.42.96.25 ...
show more2026-06-10T09:04:22.315696+02:00 debian sshd-session[2104444]: Invalid user deploy from 119.42.96.252 port 35398
...
show less
2026-06-09 05:15:36,244 fail2ban.actions [3799592]: NOTICE [sshd] Ban 119.42.96.252
2026-06- ...
show more2026-06-09 05:15:36,244 fail2ban.actions [3799592]: NOTICE [sshd] Ban 119.42.96.252
2026-06-10 04:16:44,882 fail2ban.actions [3799592]: NOTICE [sshd] Ban 119.42.96.252
...
show less
Jun 9 19:16:33 b146-54 sshd[117383]: Failed password for invalid user btc from 119.42.96.252 port 5 ...
show moreJun 9 19:16:33 b146-54 sshd[117383]: Failed password for invalid user btc from 119.42.96.252 port 56128 ssh2
Jun 9 20:09:02 b146-54 sshd[118229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.96.252 user=root
Jun 9 20:09:04 b146-54 sshd[118229]: Failed password for root from 119.42.96.252 port 59876 ssh2
...
show less
119.42.96.252 (TH/Thailand/-), 5 distributed sshd attacks on account [debian] in the last 3600 secs; ...
show more119.42.96.252 (TH/Thailand/-), 5 distributed sshd attacks on account [debian] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 9 20:06:33 13961 sshd[6020]: Invalid user debian from 88.20.32.209 port 34124
Jun 9 20:06:35 13961 sshd[6020]: Failed password for invalid user debian from 88.20.32.209 port 34124 ssh2
Jun 9 20:07:04 13961 sshd[6427]: Invalid user debian from 119.42.96.252 port 52814
Jun 9 20:06:03 13961 sshd[5877]: Invalid user debian from 37.60.232.146 port 33378
Jun 9 20:06:05 13961 sshd[5877]: Failed password for invalid user debian from 37.60.232.146 port 33378 ssh2
IP Addresses Blocked:
88.20.32.209 (ES/Spain/209.red-88-20-32.staticip.rima-tde.net)
show less
2026-06-09T22:33:56.535640+00:00 CVM51718 sshd[3940160]: pam_unix(sshd:auth): authentication failure ...
show more2026-06-09T22:33:56.535640+00:00 CVM51718 sshd[3940160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.96.252
2026-06-09T22:33:59.066221+00:00 CVM51718 sshd[3940160]: Failed password for invalid user postgres from 119.42.96.252 port 49694 ssh2
2026-06-09T22:37:56.512108+00:00 CVM51718 sshd[3940700]: Invalid user zabbix from 119.42.96.252 port 38782
...
show less
119.42.96.252 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more119.42.96.252 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 9 16:05:54 14850 sshd[412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.221.43.90 user=root
Jun 9 16:05:24 14850 sshd[32734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.96.252 user=root
Jun 9 16:05:26 14850 sshd[32734]: Failed password for root from 119.42.96.252 port 47740 ssh2
Jun 9 16:04:53 14850 sshd[32292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.56.92 user=root
Jun 9 16:04:55 14850 sshd[32292]: Failed password for root from 213.199.56.92 port 35844 ssh2
IP Addresses Blocked:
111.221.43.90 (ID/Indonesia/priv90.daxa.net)
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: deploy, Pass: [REDACTED]
Brute-Force
SSH
Showing 1 to
15
of 45 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩