This IP address has been reported a total of
149
times from
112 distinct
sources.
152.42.199.186 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:password, root:LeitboGi0ro, ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:password, root:LeitboGi0ro, root:MoeClub.org
• Number of login attempts: 3
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
2026-06-11T16:09:15.570171+11:00 www.geddy.au sshd-session[2843203]: Failed password for root from 1 ...
show more2026-06-11T16:09:15.570171+11:00 www.geddy.au sshd-session[2843203]: Failed password for root from 152.42.199.186 port 36122 ssh2
2026-06-11T16:09:17.200647+11:00 www.geddy.au sshd-session[2843207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.199.186 user=root
2026-06-11T16:09:19.016965+11:00 www.geddy.au sshd-session[2843207]: Failed password for root from 152.42.199.186 port 36750 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials used: root:password, root:LeitboGi ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials used: root:password, root:LeitboGi0ro, root:MoeClub.org
• Number of login attempts: 3
• 2 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
Jun 11 01:06:37 Tower sshd-session[1524175]: Connection closed by authenticating user root 152.42.19 ...
show moreJun 11 01:06:37 Tower sshd-session[1524175]: Connection closed by authenticating user root 152.42.199.186 port 58790 [preauth]
Jun 11 01:06:37 Tower sshd[3606]: srclimit_penalise: ipv4: new 152.42.199.186/32 deferred penalty of 5 seconds for penalty: failed authentication
Jun 11 01:06:44 Tower sshd-session[1524254]: Failed password for root from 152.42.199.186 port 40844 ssh2
Jun 11 01:06:44 Tower sshd-session[1524254]: Connection closed by authenticating user root 152.42.199.186 port 40844 [preauth]
Jun 11 01:06:44 Tower sshd[3606]: srclimit_penalise: ipv4: new 152.42.199.186/32 deferred penalty of 5 seconds for penalty: failed authentication
show less
6 attempts since 11.06.2026 06:32:10 CEST - last one: 2026-06-11T06:44:25.193536+02:00 alpha sshd-se ...
show more6 attempts since 11.06.2026 06:32:10 CEST - last one: 2026-06-11T06:44:25.193536+02:00 alpha sshd-session[869985]: Connection closed by authenticating user root 152.42.199.186 port 49884 [preauth]
show less
2026-06-11T06:42:16.427617+02:00 haigwepa sshd[8038]: Failed password for root from 152.42.199.186 p ...
show more2026-06-11T06:42:16.427617+02:00 haigwepa sshd[8038]: Failed password for root from 152.42.199.186 port 57742 ssh2
2026-06-11T06:42:19.475315+02:00 haigwepa sshd[8040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.199.186 user=root
2026-06-11T06:42:21.245718+02:00 haigwepa sshd[8040]: Failed password for root from 152.42.199.186 port 53544 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-11T06:29:36.772716+02:00 hvs sshd-session[118432]: Connection closed by authenticating user ...
show more2026-06-11T06:29:36.772716+02:00 hvs sshd-session[118432]: Connection closed by authenticating user root 152.42.199.186 port 33792 [preauth]
2026-06-11T06:29:37.864456+02:00 hvs sshd-session[118434]: Connection closed by authenticating user root 152.42.199.186 port 33806 [preauth]
2026-06-11T06:29:45.004035+02:00 hvs sshd-session[118437]: Connection closed by authenticating user root 152.42.199.186 port 33812 [preauth]
2026-06-11T06:41:45.336755+02:00 hvs sshd-session[118531]: Connection closed by authenticating user root 152.42.199.186 port 36364 [preauth]
2026-06-11T06:41:47.499667+02:00 hvs sshd-session[118533]: Connection closed by authenticating user root 152.42.199.186 port 54532 [preauth]
...
show less
2026-06-11T00:28:20.510633-04:00 mailstore.ab-data.us sshd-session[281848]: error: kex_exchange_iden ...
show more2026-06-11T00:28:20.510633-04:00 mailstore.ab-data.us sshd-session[281848]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-11T00:28:20.511468-04:00 mailstore.ab-data.us sshd-session[281848]: Connection reset by 152.42.199.186 port 46264
2026-06-11T00:28:21.232629-04:00 mailstore.ab-data.us sshd-session[281846]: Connection closed by authenticating user root 152.42.199.186 port 46248 [preauth]
2026-06-11T00:40:25.531170-04:00 mailstore.ab-data.us sshd-session[282311]: Connection closed by authenticating user root 152.42.199.186 port 54294 [preauth]
...
show less
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-11T04:23:33Z and 2026-06-1 ...
show moreCowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-11T04:23:33Z and 2026-06-11T04:35:35Z
show less