This IP address has been reported a total of
41
times from
39 distinct
sources.
119.3.211.220 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 16
reports;
France
with 4
reports;
Brazil
with 3
reports.
The most common categories in these recent reports were:
SSH
34
times;
Brute-Force
32
times;
Port Scan
8
times;
Hacking
3
times;
Exploited Host
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 4 port scanning attempts on 14-10-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
2026-10-14T20:58:25.449306+02:00 dev sshd[4132296]: Failed password for invalid user egor from 119.3 ...
show more2026-10-14T20:58:25.449306+02:00 dev sshd[4132296]: Failed password for invalid user egor from 119.3.211.220 port 56624 ssh2
2026-10-14T21:07:50.993620+02:00 dev sshd[4143875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.3.211.220 user=root
2026-10-14T21:07:53.219354+02:00 dev sshd[4143875]: Failed password for root from 119.3.211.220 port 45628 ssh2
...
show less
2026-10-14T18:58:05.778878+01:00 pbs-bit-lib-01 sshd[1374059]: Invalid user thomas from 119.3.211.22 ...
show more2026-10-14T18:58:05.778878+01:00 pbs-bit-lib-01 sshd[1374059]: Invalid user thomas from 119.3.211.220 port 48120
2026-10-14T19:07:54.556166+01:00 pbs-bit-lib-01 sshd[1374148]: Invalid user activemq from 119.3.211.220 port 57286
2026-10-14T19:09:23.486301+01:00 pbs-bit-lib-01 sshd[1374175]: Invalid user ubuntu from 119.3.211.220 port 36820
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-10-14T20:04:51.480333+02:00 h2970155 sshd[91873]: Invalid user thomas from 119.3.211.220 port 4 ...
show more2026-10-14T20:04:51.480333+02:00 h2970155 sshd[91873]: Invalid user thomas from 119.3.211.220 port 40692
...
show less
reconnaissance scanning — target profiling | Stage 1 | ATT&CK:T1595 | at edge perimeter | raw=GET / ...
show morereconnaissance scanning — target profiling | Stage 1 | ATT&CK:T1595 | at edge perimeter | raw=GET / HTTP/1.1 | src_port=22 ASN=AS0 attempts=7 dst=/ sev=high as=HWCSNET isp=Huawei Cloud Service data center geo=CN/Beijing rdns=ecs-119-3-211-220.compute.hwclouds-dns.com infra=hosting sensor=honeypot | NOVEL_PAYLOAD fp=4bcdea652f9b | 2026-10-14 13:30:30 UTC report#38 [origin=elevated-risk] [zero-day candidate, correlated with prior observed variants]
show less
Port Scan
Hacking
Anonymous
2026-10-14T12:41:13.871928+00:00 ubuntu1 sshd[1984315]: Invalid user test from 119.3.211.220 port 47 ...
show more2026-10-14T12:41:13.871928+00:00 ubuntu1 sshd[1984315]: Invalid user test from 119.3.211.220 port 47504
2026-10-14T12:41:14.041228+00:00 ubuntu1 sshd[1984315]: Disconnected from invalid user test 119.3.211.220 port 47504 [preauth]
2026-10-14T12:44:14.342703+00:00 ubuntu1 sshd[1986666]: Disconnected from authenticating user root 119.3.211.220 port 52282 [preauth]
...
show less
