Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
119.91.211.202 has been reported 332
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 119.91.211.202
This IP address has been reported a total of
332
times from
200 distinct
sources.
119.91.211.202 was first reported on
, and the most recent report was
.
May 10 07:52:08 *host* sshd\[30592\]: User *user* from 119.91.211.202 not allowed because none of us ...
show moreMay 10 07:52:08 *host* sshd\[30592\]: User *user* from 119.91.211.202 not allowed because none of user\'s groups are listed in AllowGroups
show less
May 10 07:23:49 sun sshd[1210574]: Invalid user prestashop from 119.91.211.202 port 42710
May 10 07: ...
show moreMay 10 07:23:49 sun sshd[1210574]: Invalid user prestashop from 119.91.211.202 port 42710
May 10 07:23:49 sun sshd[1210574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
May 10 07:23:51 sun sshd[1210574]: Failed password for invalid user prestashop from 119.91.211.202 port 42710 ssh2
...
show less
May 10 13:28:29 starlight-server sshd[18059]: Invalid user dev from 119.91.211.202 port 53144
May 10 ...
show moreMay 10 13:28:29 starlight-server sshd[18059]: Invalid user dev from 119.91.211.202 port 53144
May 10 13:28:29 starlight-server sshd[18059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
May 10 13:28:29 starlight-server sshd[18059]: Invalid user dev from 119.91.211.202 port 53144
May 10 13:28:31 starlight-server sshd[18059]: Failed password for invalid user dev from 119.91.211.202 port 53144 ssh2
May 10 13:29:56 starlight-server sshd[18083]: Invalid user test3 from 119.91.211.202 port 38256
...
show less
2024-05-10T03:50:37.830900+00:00 edge-sap-con01.int.pdx.net.uk sshd[679168]: Failed password for roo ...
show more2024-05-10T03:50:37.830900+00:00 edge-sap-con01.int.pdx.net.uk sshd[679168]: Failed password for root from 119.91.211.202 port 46804 ssh2
2024-05-10T03:52:04.612527+00:00 edge-sap-con01.int.pdx.net.uk sshd[679195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202 user=root
2024-05-10T03:52:06.161945+00:00 edge-sap-con01.int.pdx.net.uk sshd[679195]: Failed password for root from 119.91.211.202 port 33212 ssh2
...
show less
May 9 22:10:25 scp sshd[4114754]: Invalid user training from 119.91.211.202 port 47062
May 9 22:20 ...
show moreMay 9 22:10:25 scp sshd[4114754]: Invalid user training from 119.91.211.202 port 47062
May 9 22:20:29 scp sshd[4129755]: Invalid user local from 119.91.211.202 port 36210
May 9 22:21:02 scp sshd[4130593]: Invalid user gentoo from 119.91.211.202 port 44672
...
show less
Report 1141268 with IP 2152312 for SSH brute-force attack by source 2149419 via ssh-honeypot/0.2.0+h ...
show moreReport 1141268 with IP 2152312 for SSH brute-force attack by source 2149419 via ssh-honeypot/0.2.0+http
show less
May 8 23:03:22 v4bgp sshd[1196757]: Invalid user mafia from 119.91.211.202 port 51220
May 8 23:03: ...
show moreMay 8 23:03:22 v4bgp sshd[1196757]: Invalid user mafia from 119.91.211.202 port 51220
May 8 23:03:22 v4bgp sshd[1196757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
May 8 23:03:25 v4bgp sshd[1196757]: Failed password for invalid user mafia from 119.91.211.202 port 51220 ssh2
...
show less
May 8 16:44:52 dagasistemas sshd[30951]: Invalid user database from 119.91.211.202 port 57378
May ...
show moreMay 8 16:44:52 dagasistemas sshd[30951]: Invalid user database from 119.91.211.202 port 57378
May 8 16:44:52 dagasistemas sshd[30951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
May 8 16:44:54 dagasistemas sshd[30951]: Failed password for invalid user database from 119.91.211.202 port 57378 ssh2
...
show less
2024-05-08T18:14:22.711182 mail2.akcurate.de sshd[1274475]: Connection closed by 119.91.211.202 port ...
show more2024-05-08T18:14:22.711182 mail2.akcurate.de sshd[1274475]: Connection closed by 119.91.211.202 port 45318 [preauth]
2024-05-08T18:15:40.832279 mail2.akcurate.de sshd[1274505]: Invalid user devops from 119.91.211.202 port 57636
...
show less
2024-05-08T17:42:48.878083 mail2.akcurate.de sshd[1273520]: Disconnected from authenticating user ro ...
show more2024-05-08T17:42:48.878083 mail2.akcurate.de sshd[1273520]: Disconnected from authenticating user root 119.91.211.202 port 40592 [preauth]
2024-05-08T17:55:08.896338 mail2.akcurate.de sshd[1273602]: Connection closed by 119.91.211.202 port 42246 [preauth]
2024-05-08T17:55:19.331440 mail2.akcurate.de sshd[1274298]: Disconnected from authenticating user root 119.91.211.202 port 54546 [preauth]
...
show less
Brute-Force
SSH
Anonymous
119.91.211.202 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ...
show more119.91.211.202 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: May 8 11:47:03 server2 sshd[7838]: Failed password for root from 51.254.143.15 port 57220 ssh2
May 8 11:46:10 server2 sshd[6678]: Failed password for root from 43.156.103.182 port 46492 ssh2
May 8 11:47:09 server2 sshd[7849]: Failed password for root from 43.135.173.175 port 35128 ssh2
May 8 11:43:25 server2 sshd[3120]: Failed password for root from 119.91.211.202 port 52908 ssh2
May 8 11:44:59 server2 sshd[5311]: Failed password for root from 218.77.34.159 port 57040 ssh2
IP Addresses Blocked:
51.254.143.15 (FR/France/-)
43.156.103.182 (JP/Japan/-)
43.135.173.175 (JP/Japan/-)
show less
Brute-Force
Anonymous
(sshd) Failed SSH login from 119.91.211.202 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 119.91.211.202 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 8 10:54:19 server4 sshd[7881]: Invalid user admin from 119.91.211.202
May 8 10:54:19 server4 sshd[7881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
May 8 10:54:21 server4 sshd[7881]: Failed password for invalid user admin from 119.91.211.202 port 37322 ssh2
May 8 10:59:52 server4 sshd[9399]: Invalid user deploy from 119.91.211.202
May 8 10:59:52 server4 sshd[9399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.91.211.202
show less
2024-05-08T11:54:58.276336+00:00 npc-remote sshd[13162]: Invalid user seafile from 119.91.211.202 po ...
show more2024-05-08T11:54:58.276336+00:00 npc-remote sshd[13162]: Invalid user seafile from 119.91.211.202 port 44074
...
show less