JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.96.220.103

119.96.220.103 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 1%: ?

ISP	CHINANET Hubei province network
Usage Type	Commercial
ASN	AS58563
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.96.220.103

Whois 119.96.220.103

IP Abuse Reports for 119.96.220.103:

This IP address has been reported a total of 136 times from 63 distinct sources. 119.96.220.103 was first reported on December 24th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-05-20 17:32:24 (3 weeks ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇱🇹 sh97	2026-01-07 18:21:50 (5 months ago)	Winner: SSH Brute Force from 119.96.220.103 at 2026-01-07 23:51:50 IST	Brute-Force SSH
🇺🇸 BSG Webmaster	2026-01-03 08:30:05 (5 months ago)	119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 29B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2026-01-02 08:30:04 (5 months ago)	119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 29B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-12-31 08:30:03 (5 months ago)	119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 29B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-12-30 08:30:03 (5 months ago)	119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 29B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-29 23:28:01 (5 months ago)		Brute-Force Web App Attack
🇺🇸 BSG Webmaster	2025-12-29 08:30:02 (5 months ago)	119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 119.96.220.103 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 29B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 compilergeek	2025-12-29 05:10:26 (5 months ago)	2025-12-29T00:10:15.257026-05:00 main-nyc3 sshd[930903]: Invalid user user from 119.96.220.103 port ... show more 2025-12-29T00:10:15.257026-05:00 main-nyc3 sshd[930903]: Invalid user user from 119.96.220.103 port 60636 2025-12-29T00:10:19.898162-05:00 main-nyc3 sshd[930905]: Invalid user user from 119.96.220.103 port 60640 2025-12-29T00:10:21.391208-05:00 main-nyc3 sshd[930907]: Invalid user user from 119.96.220.103 port 60642 2025-12-29T00:10:23.495303-05:00 main-nyc3 sshd[930909]: Invalid user user from 119.96.220.103 port 60644 2025-12-29T00:10:25.081045-05:00 main-nyc3 sshd[930911]: Invalid user user from 119.96.220.103 port 13012 ... show less	Brute-Force SSH
🇳🇱 NussLi	2025-12-29 04:45:03 (5 months ago)	2025-12-29T04:44:52.543681+00:00 nextcloud sshd[2172696]: pam_unix(sshd:auth): authentication failur ... show more 2025-12-29T04:44:52.543681+00:00 nextcloud sshd[2172696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.220.103 user=root 2025-12-29T04:44:55.021578+00:00 nextcloud sshd[2172696]: Failed password for root from 119.96.220.103 port 35592 ssh2 2025-12-29T04:44:59.153316+00:00 nextcloud sshd[2172704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.220.103 user=root 2025-12-29T04:45:01.927105+00:00 nextcloud sshd[2172704]: Failed password for root from 119.96.220.103 port 53948 ssh2 ... show less	Brute-Force SSH
🇫🇷 wblondel	2025-12-29 04:34:29 (5 months ago)	2025-12-29T05:34:27.762462+01:00 pigeon.williamblondel.fr sshd-session[3941587]: Connection closed b ... show more 2025-12-29T05:34:27.762462+01:00 pigeon.williamblondel.fr sshd-session[3941587]: Connection closed by authenticating user root 119.96.220.103 port 43380 [preauth] 2025-12-29T05:34:28.068583+01:00 pigeon.williamblondel.fr sshd-session[3941641]: Connection from 119.96.220.103 port 43394 on 193.168.147.152 port 22 rdomain "" 2025-12-29T05:34:29.446690+01:00 pigeon.williamblondel.fr sshd-session[3941641]: Connection closed by authenticating user root 119.96.220.103 port 43394 [preauth] ... show less	Brute-Force SSH
🇩🇪 LoNET	2025-12-29 02:14:19 (5 months ago)	Report 2002271 with IP 3049829 for SSH brute-force attack by source 3044496 via ssh-honeypot/0.2.0+h ... show more Report 2002271 with IP 3049829 for SSH brute-force attack by source 3044496 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇬🇧 [email protected]	2025-12-29 00:38:57 (5 months ago)	...	Brute-Force SSH
🇦🇹 urnilxfgbez	2025-12-28 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 SpaceHost-Server	2025-12-28 23:27:50 (5 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 172.94.9.120

🇺🇸 165.154.173.226

🇺🇸 104.171.28.244

🇨🇳 183.236.75.189

🇰🇷 182.218.116.96

🇬🇧 87.236.176.100

🇺🇸 74.125.75.146

🇳🇱 45.148.10.240

🇮🇳 45.127.58.70

🇹🇼 34.81.72.185

🇻🇳 14.186.125.20

🇧🇷 201.16.238.49

🇻🇪 190.142.97.50

🇳🇱 172.211.56.214

🇺🇸 172.208.48.177

🇺🇸 162.216.150.197

🇨🇳 117.132.5.139

🇨🇦 85.217.149.69

🇻🇳 42.114.218.222

🇧🇷 20.226.70.167