This IP address has been reported a total of
22
times from
21 distinct
sources.
119.6.54.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Aug 24 18:22:29 Invictus sshd[4173586]: Failed password for root from 119.6.54.138 port 54106 ssh2
A ...
show moreAug 24 18:22:29 Invictus sshd[4173586]: Failed password for root from 119.6.54.138 port 54106 ssh2
Aug 24 18:22:33 Invictus sshd[4173600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.54.138 user=root
Aug 24 18:22:35 Invictus sshd[4173600]: Failed password for root from 119.6.54.138 port 57292 ssh2
Aug 24 18:22:38 Invictus sshd[4173618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.54.138 user=root
Aug 24 18:22:40 Invictus sshd[4173618]: Failed password for root from 119.6.54.138 port 60400 ssh2
Aug 24 18:22:43 Invictus sshd[4173628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.54.138 user=root
Aug 24 18:22:44 Invictus sshd[4173628]: Failed password for root from 119.6.54.138 port 34102 ssh2
...
show less
2026-08-24T16:02:57.892450+02:00 rootserver sshd[3136125]: Failed password for root from 119.6.54.13 ...
show more2026-08-24T16:02:57.892450+02:00 rootserver sshd[3136125]: Failed password for root from 119.6.54.138 port 58394 ssh2
2026-08-24T16:03:02.426652+02:00 rootserver sshd[3136194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.54.138 user=root
2026-08-24T16:03:04.717186+02:00 rootserver sshd[3136194]: Failed password for root from 119.6.54.138 port 33818 ssh2
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-08-24T04:51:54.234264+02:00 mail sshd-session[2287557]: Failed password for root from 119.6.54. ...
show more2026-08-24T04:51:54.234264+02:00 mail sshd-session[2287557]: Failed password for root from 119.6.54.138 port 43536 ssh2
2026-08-24T04:51:58.679286+02:00 mail sshd-session[2287560]: Failed password for root from 119.6.54.138 port 46452 ssh2
2026-08-24T04:52:04.711204+02:00 mail sshd-session[2287563]: Failed password for root from 119.6.54.138 port 50708 ssh2
2026-08-24T04:52:09.061194+02:00 mail sshd-session[2287565]: Failed password for root from 119.6.54.138 port 53322 ssh2
2026-08-24T04:52:12.774281+02:00 mail sshd-session[2287567]: Failed password for root from 119.6.54.138 port 56030 ssh2
...
show less
2026-08-23T18:40:41.270419mist-lumin sshd[32937]: Failed password for root from 119.6.54.138 port 33 ...
show more2026-08-23T18:40:41.270419mist-lumin sshd[32937]: Failed password for root from 119.6.54.138 port 33116 ssh2
2026-08-23T18:40:43.623300mist-lumin sshd[32939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.54.138 user=root
2026-08-23T18:40:45.632795mist-lumin sshd[32939]: Failed password for root from 119.6.54.138 port 35860 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩