JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

119.237.243.98

Neutral Activity

Abuse Confidence Score

0% Low Risk

54 reports

45 reporters · latest 2 months ago

ISP: Hong Kong Telecommunications (HKT) Limited Mass Internet
Usage Type: Fixed Line ISP
ASN: AS4760
Domain Name: netvigator.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

119.237.243.98 has been reported 54 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

54 from 45 distinct reporters

First reported

August 11th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-15 07:06:21 UTC · (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇿🇦 conure.sh	2026-08-12 12:00:48 UTC · (3 months ago)	csagent: score 15.8: 404 noise floor x5, php 404 x3, phpunit eval-stdin RCE x1; 1 domain(s) in 0s	Web App Attack
🇨🇱 ovallevelasquezanibal	2026-08-12 12:00:22 UTC · (3 months ago)	Detectado por Wazuh SIEM en api-ux.com \| Alertas: 16 \| Nivel max: 10 \| Agentes: web-apiux-2025 \| PHP CGI-bin vulnerability attempt.; Web server 400 error code.; Multiple web server 400 error codes from same source ip.	Web App Attack
🇺🇸 LSPCCU	2026-08-12 03:32:25 UTC · (3 months ago)	TSEC Honeypot Network report. Threat score: 80/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 119.237.243.98 classified as botnet node participating in coordinated attack campaigns (high ... show more TSEC Honeypot Network report. Threat score: 80/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 119.237.243.98 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 yzfdude1	2026-08-12 02:45:40 UTC · (3 months ago)	2026-08-11T20:39:53.594829-06:00 b146-21 sshd[132862]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 user=admin 2026-08-11T20:39:55.893534-06:00 b146-21 sshd[132862]: Failed password for invalid ... show more 2026-08-11T20:39:53.594829-06:00 b146-21 sshd[132862]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 user=admin 2026-08-11T20:39:55.893534-06:00 b146-21 sshd[132862]: Failed password for invalid user admin from 119.237.243.98 port 44066 ssh2 2026-08-11T20:45:39.587874-06:00 b146-21 sshd[132896]: Invalid user orangepi from 119.237.243.98 port 58238 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-08-12 02:44:29 UTC · (3 months ago)	(sshd) Failed SSH login from 119.237.243.98 (HK/Hong Kong/n119237243098.netvigator.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 21:32:18 14970 sshd[25359]: Invalid user admin from 119.237.243.98 port 35964 Aug ... show more (sshd) Failed SSH login from 119.237.243.98 (HK/Hong Kong/n119237243098.netvigator.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 21:32:18 14970 sshd[25359]: Invalid user admin from 119.237.243.98 port 35964 Aug 11 21:32:20 14970 sshd[25359]: Failed password for invalid user admin from 119.237.243.98 port 35964 ssh2 Aug 11 21:38:21 14970 sshd[28549]: Invalid user orangepi from 119.237.243.98 port 34098 Aug 11 21:38:23 14970 sshd[28549]: Failed password for invalid user orangepi from 119.237.243.98 port 34098 ssh2 Aug 11 21:44:11 14970 sshd[31730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 user=root show less	Brute-Force SSH
🇺🇸 MPL	2026-08-12 02:05:59 UTC · (3 months ago)	tcp/2222 (2 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-08-12 02:02:59 UTC · (3 months ago)	(mod_security) mod_security (id:218420) triggered by 119.237.243.98 (n119237243098.netvigator.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:02:53.875716 2026] [security2:error] [pid 1655764:tid 1655764 ... show more (mod_security) mod_security (id:218420) triggered by 119.237.243.98 (n119237243098.netvigator.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 22:02:53.875716 2026] [security2:error] [pid 1655764:tid 1655764] [client 119.237.243.98:34132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.4:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.4"] [uri "/hello.world"] [unique_id "anvUTb_m4bgAG7PlNXf-WAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ufn.edu.br	2026-08-12 01:58:34 UTC · (3 months ago)	Aug 11 22:53:08 wslbvm01 sshd[4013948]: Invalid user admin from 119.237.243.98 port 53188 Aug 11 22:53:10 wslbvm01 sshd[4013948]: Failed password for invalid user admin from 119.237.243.98 port 53188 ssh2 Aug 11 22:58:33 wslbvm01 sshd[4015235]: Inval ... show more Aug 11 22:53:08 wslbvm01 sshd[4013948]: Invalid user admin from 119.237.243.98 port 53188 Aug 11 22:53:10 wslbvm01 sshd[4013948]: Failed password for invalid user admin from 119.237.243.98 port 53188 ssh2 Aug 11 22:58:33 wslbvm01 sshd[4015235]: Invalid user orangepi from 119.237.243.98 port 38684 ... show less	Brute-Force SSH
🇩🇪 jjjjj	2026-08-12 01:55:21 UTC · (3 months ago)	ssh fail2ban: 2026-08-12 03:49:56 +02:00 Invalid user admin, port=43970 2026-08-12 03:49:56 +02:00 auth fail: user unspecified 2026-08-12 03:49:59 +02:00 wrong password: user=admin, port=43970 2026-08-12 03:50:00 +02:00 conn closed by invalid user ad ... show more ssh fail2ban: 2026-08-12 03:49:56 +02:00 Invalid user admin, port=43970 2026-08-12 03:49:56 +02:00 auth fail: user unspecified 2026-08-12 03:49:59 +02:00 wrong password: user=admin, port=43970 2026-08-12 03:50:00 +02:00 conn closed by invalid user admin, port=43970 [preauth] 2026-08-12 03:55:18 +02:00 Invalid user orangepi, port=37596 2026-08-12 03:55:18 +02:00 auth fail: user unspecified 2026-08-12 03:55:21 +02:00 wrong password: user=orangepi, port=37596 (automated) show less	Brute-Force SSH
🇩🇪 paissangroup	2026-08-12 01:42:49 UTC · (3 months ago)	Multiple WAF Violations	Web App Attack
🇦🇺 2000cn.com.au	2026-08-12 01:21:13 UTC · (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇺🇸 bigscoots.com	2026-08-12 01:14:36 UTC · (3 months ago)	(sshd) Failed SSH login from 119.237.243.98 (HK/Hong Kong/n119237243098.netvigator.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 20:04:27 17988 sshd[584]: Invalid user admin from 119.237.243.98 port 41154 Aug 1 ... show more (sshd) Failed SSH login from 119.237.243.98 (HK/Hong Kong/n119237243098.netvigator.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 20:04:27 17988 sshd[584]: Invalid user admin from 119.237.243.98 port 41154 Aug 11 20:04:29 17988 sshd[584]: Failed password for invalid user admin from 119.237.243.98 port 41154 ssh2 Aug 11 20:09:28 17988 sshd[2789]: Invalid user orangepi from 119.237.243.98 port 40800 Aug 11 20:09:29 17988 sshd[2789]: Failed password for invalid user orangepi from 119.237.243.98 port 40800 ssh2 Aug 11 20:14:32 17988 sshd[5033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 user=root show less	Brute-Force SSH
🇬🇧 andypiper	2026-08-12 01:01:00 UTC · (3 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇰🇷 Woodie	2026-08-12 00:44:16 UTC · (3 months ago)	2026-08-11T20:39:28.351335-04:00 debian sshd[279453]: Invalid user orangepi from 119.237.243.98 port 43648 2026-08-11T20:39:28.354865-04:00 debian sshd[279453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1 ... show more 2026-08-11T20:39:28.351335-04:00 debian sshd[279453]: Invalid user orangepi from 119.237.243.98 port 43648 2026-08-11T20:39:28.354865-04:00 debian sshd[279453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 2026-08-11T20:39:30.453345-04:00 debian sshd[279453]: Failed password for invalid user orangepi from 119.237.243.98 port 43648 ssh2 2026-08-11T20:44:14.541087-04:00 debian sshd[282181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.237.243.98 user=root 2026-08-11T20:44:15.902113-04:00 debian sshd[282181]: Failed password for root from 119.237.243.98 port 55778 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.141

🇲🇦 41.142.86.208

🇨🇦 34.130.115.255

🇬🇧 188.240.59.21

🇧🇴 166.114.154.61

🇺🇸 40.121.179.100

🇺🇦 176.98.71.247

🇻🇪 45.186.209.133

🇺🇦 194.44.50.24

🇸🇬 149.118.59.156

🇰🇷 118.37.214.187

🇳🇱 93.174.93.55

🇷🇴 80.94.92.55

🇺🇸 70.183.226.42

🇫🇮 45.147.8.92

🇺🇸 23.21.179.27

🇳🇱 185.223.235.52

🇫🇷 151.80.133.130

🇵🇰 139.135.43.97

🇮🇩 103.174.238.9