JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.96.120.240

119.96.120.240 was found in our database!

This IP was reported 229 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Hubei province network
Usage Type	Commercial
ASN	AS58563
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.96.120.240

Whois 119.96.120.240

IP Abuse Reports for 119.96.120.240:

This IP address has been reported a total of 229 times from 162 distinct sources. 119.96.120.240 was first reported on July 20th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 decisionconcepts	2024-07-30 00:52:18 (1 year ago)	relay: Fail2Ban detected 2 attempts against sshd from: 119.96.120.240	Brute-Force SSH
🇩🇪 dwmp	2024-07-29 23:00:47 (1 year ago)	Jul 30 00:58:22 webcore sshd[2088818]: Invalid user ec2-user from 119.96.120.240 port 55836 Jul 30 0 ... show more Jul 30 00:58:22 webcore sshd[2088818]: Invalid user ec2-user from 119.96.120.240 port 55836 Jul 30 00:58:22 webcore sshd[2088818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.120.240 Jul 30 00:58:24 webcore sshd[2088818]: Failed password for invalid user ec2-user from 119.96.120.240 port 55836 ssh2 Jul 30 01:00:45 webcore sshd[2089303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.120.240 user=root Jul 30 01:00:46 webcore sshd[2089303]: Failed password for root from 119.96.120.240 port 50608 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-07-29 22:37:04 (1 year ago)	Jul 30 01:59:29 Digitalogic sshd[1998236]: Disconnected from authenticating user root 119.96.120.240 ... show more Jul 30 01:59:29 Digitalogic sshd[1998236]: Disconnected from authenticating user root 119.96.120.240 port 37080 [preauth] Jul 30 02:07:01 Digitalogic sshd[2000297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.120.240 user=root Jul 30 02:07:03 Digitalogic sshd[2000297]: Failed password for root from 119.96.120.240 port 58484 ssh2 ... show less	Brute-Force SSH
🇺🇸 voolik.com	2024-07-29 22:17:31 (1 year ago)	Jul 29 22:13:06 instance-20211220-1015 sshd[2436471]: Invalid user ftpuser from 119.96.120.240 port ... show more Jul 29 22:13:06 instance-20211220-1015 sshd[2436471]: Invalid user ftpuser from 119.96.120.240 port 49528 Jul 29 22:13:36 instance-20211220-1015 sshd[2436746]: Invalid user user1 from 119.96.120.240 port 55488 Jul 29 22:15:47 instance-20211220-1015 sshd[2438062]: Invalid user guest from 119.96.120.240 port 57040 Jul 29 22:17:06 instance-20211220-1015 sshd[2438684]: Invalid user ubuntu from 119.96.120.240 port 46682 Jul 29 22:17:30 instance-20211220-1015 sshd[2438940]: Invalid user tester from 119.96.120.240 port 52636 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2024-07-29 22:04:33 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/119.96.120.240	Brute-Force
🇩🇪 John Doe	2024-07-29 20:42:53 (1 year ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 UB	2024-07-29 19:35:18 (1 year ago)	<brute-forcing>	Brute-Force SSH
🇧🇬 lushy	2024-07-29 15:37:04 (1 year ago)	Jul 29 16:36:12 web3 sshd[3349436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jul 29 16:36:12 web3 sshd[3349436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.120.240 user=root Jul 29 16:36:14 web3 sshd[3349436]: Failed password for root from 119.96.120.240 port 50036 ssh2 Jul 29 16:37:01 web3 sshd[3349453]: Invalid user ubuntu from 119.96.120.240 port 60024 Jul 29 16:37:01 web3 sshd[3349453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.120.240 Jul 29 16:37:03 web3 sshd[3349453]: Failed password for invalid user ubuntu from 119.96.120.240 port 60024 ssh2 show less	Brute-Force SSH
Anonymous	2024-07-29 13:27:31 (1 year ago)		Brute-Force SSH
🇨🇦 craftxbox	2024-07-29 11:53:02 (1 year ago)	Jul 29 11:48:49 mail sshd[1889279]: Invalid user admin2 from 119.96.120.240 port 50222 Jul 29 11:50: ... show more Jul 29 11:48:49 mail sshd[1889279]: Invalid user admin2 from 119.96.120.240 port 50222 Jul 29 11:50:32 mail sshd[1889348]: Invalid user root1 from 119.96.120.240 port 44244 Jul 29 11:50:32 mail sshd[1889348]: Invalid user root1 from 119.96.120.240 port 44244 Jul 29 11:53:02 mail sshd[1889421]: Invalid user debian from 119.96.120.240 port 49392 Jul 29 11:53:02 mail sshd[1889421]: Invalid user debian from 119.96.120.240 port 49392 ... show less	Brute-Force SSH
🇳🇱 nikoladd	2024-07-29 10:45:53 (1 year ago)	Jul 29 13:37:12 server2 sshd\[13552\]: User root from 119.96.120.240 not allowed because not listed ... show more Jul 29 13:37:12 server2 sshd\[13552\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers Jul 29 13:43:06 server2 sshd\[14092\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers Jul 29 13:43:47 server2 sshd\[14128\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers Jul 29 13:44:24 server2 sshd\[14187\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers Jul 29 13:45:14 server2 sshd\[14413\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers Jul 29 13:45:51 server2 sshd\[14422\]: User root from 119.96.120.240 not allowed because not listed in AllowUsers show less	Brute-Force
Anonymous	2024-07-29 10:40:46 (1 year ago)	119.96.120.240 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 119.96.120.240 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 29 06:36:14 server2 sshd[27643]: Failed password for root from 43.133.54.108 port 35032 ssh2 Jul 29 06:40:40 server2 sshd[28385]: Failed password for root from 119.96.120.240 port 36722 ssh2 Jul 29 06:39:25 server2 sshd[28134]: Failed password for root from 59.3.54.132 port 43884 ssh2 Jul 29 06:37:38 server2 sshd[27892]: Failed password for root from 106.12.56.142 port 44470 ssh2 Jul 29 06:39:49 server2 sshd[28161]: Failed password for root from 59.3.54.132 port 50210 ssh2 Jul 29 06:39:36 server2 sshd[28147]: Failed password for root from 59.3.54.132 port 46753 ssh2 IP Addresses Blocked: 43.133.54.108 (JP/Japan/-) show less	Brute-Force
🇩🇪 DAUGDE	2024-07-29 08:13:58 (1 year ago)	Jul 29 09:58:44 v2202011133598132617 sshd[158306]: Invalid user oracle from 119.96.120.240 port 4996 ... show more Jul 29 09:58:44 v2202011133598132617 sshd[158306]: Invalid user oracle from 119.96.120.240 port 49964 Jul 29 10:08:37 v2202011133598132617 sshd[158930]: Invalid user guest from 119.96.120.240 port 41836 Jul 29 10:13:58 v2202011133598132617 sshd[159191]: Invalid user ubuntu from 119.96.120.240 port 59920 ... show less	Brute-Force SSH
Anonymous	2024-07-29 08:07:33 (1 year ago)	SSH Bruteforce Attempt (failed auth)	Brute-Force SSH
🇺🇸 dpinse	2024-07-29 07:03:44 (1 year ago)	sshd: Attempt to login using a non-existent user	Brute-Force SSH

Showing 1 to 15 of 229 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 85.203.23.4

🇲🇰 188.44.20.30

🇧🇷 179.51.153.37

🇺🇾 167.62.82.228

🇺🇸 165.154.172.97

🇻🇳 160.191.244.158

🇨🇳 117.68.74.158

🇨🇿 103.200.28.222

🇯🇵 103.125.146.88

🇵🇹 93.119.168.102

🇸🇬 85.203.23.44

🇸🇬 85.203.23.7

🇸🇬 85.203.23.3

🇨🇳 36.33.167.165

🇺🇸 34.152.114.221

🇩🇪 23.189.104.202

🇰🇷 14.63.196.175

🇯🇵 160.251.202.50

🇻🇳 160.30.172.107

🇮🇳 122.177.247.111