This IP address has been reported a total of
301
times from
192 distinct
sources.
152.42.136.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Connection to port 6000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172
User ...
show moreConnection to port 6000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20
show less
Port Scan
Hacking
Anonymous
denied traffic to a honeypot network. destination port 1111.
Blocked by UFW (TCP on 3389)
Source port: 61012
TTL: 237
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 3389)
Source port: 61012
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 152.42.136.139) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
70 attempts since 20.10.2025 05:48:35 UTC - last one: 2025-10-20T08:30:06.560542+02:00 beta sshd-ses ...
show more70 attempts since 20.10.2025 05:48:35 UTC - last one: 2025-10-20T08:30:06.560542+02:00 beta sshd-session[1542742]: Connection closed by invalid user pi 152.42.136.139 port 41154 [preauth]
show less
2025-10-20T08:19:46.859341+02:00 v6627 sshd[3060004]: Invalid user oracle from 152.42.136.139 port 5 ...
show more2025-10-20T08:19:46.859341+02:00 v6627 sshd[3060004]: Invalid user oracle from 152.42.136.139 port 58366
2025-10-20T08:20:21.210371+02:00 v6627 sshd[3060285]: Invalid user oracle from 152.42.136.139 port 48576
2025-10-20T08:20:55.561807+02:00 v6627 sshd[3060374]: Invalid user oracle from 152.42.136.139 port 38714
2025-10-20T08:21:28.599237+02:00 v6627 sshd[3060669]: Invalid user oracle from 152.42.136.139 port 38950
2025-10-20T08:22:02.017939+02:00 v6627 sshd[3060793]: Invalid user oracle from 152.42.136.139 port 45266
...
show less
2025-10-20T08:21:01.422750+02:00 ozelot sshd-session[2744177]: pam_unix(sshd:auth): authentication f ...
show more2025-10-20T08:21:01.422750+02:00 ozelot sshd-session[2744177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.136.139
2025-10-20T08:21:03.461704+02:00 ozelot sshd-session[2744177]: Failed password for invalid user oracle from 152.42.136.139 port 57644 ssh2
2025-10-20T08:21:34.261909+02:00 ozelot sshd-session[2752379]: Invalid user oracle from 152.42.136.139 port 33830
show less
Oct 20 08:20:21 lnxweb62 sshd[25557]: Invalid user oracle from 152.42.136.139 port 40750
Oct 20 08:2 ...
show moreOct 20 08:20:21 lnxweb62 sshd[25557]: Invalid user oracle from 152.42.136.139 port 40750
Oct 20 08:20:21 lnxweb62 sshd[25557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.136.139
Oct 20 08:20:23 lnxweb62 sshd[25557]: Failed password for invalid user oracle from 152.42.136.139 port 40750 ssh2
Oct 20 08:20:21 lnxweb62 sshd[25557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.136.139
Oct 20 08:20:23 lnxweb62 sshd[25557]: Failed password for invalid user oracle from 152.42.136.139 port 40750 ssh2
...
show less
2025-10-20T07:13:06.345662+01:00 ubuntu sshd[328993]: Failed password for invalid user guest from 15 ...
show more2025-10-20T07:13:06.345662+01:00 ubuntu sshd[328993]: Failed password for invalid user guest from 152.42.136.139 port 39128 ssh2
2025-10-20T07:13:40.999436+01:00 ubuntu sshd[328997]: Invalid user guest from 152.42.136.139 port 49634
2025-10-20T07:13:41.072451+01:00 ubuntu sshd[328997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.136.139
2025-10-20T07:13:43.402158+01:00 ubuntu sshd[328997]: Failed password for invalid user guest from 152.42.136.139 port 49634 ssh2
2025-10-20T07:14:15.891894+01:00 ubuntu sshd[329005]: Invalid user guest from 152.42.136.139 port 57026
...
show less
Brute-Force
SSH
Showing 1 to
15
of 301 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩