This IP address has been reported a total of
53
times from
50 distinct
sources.
198.20.133.119 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 9
reports;
Netherlands
with 7
reports.
The most common categories in these recent reports were:
Brute-Force
48
times;
SSH
47
times;
Port Scan
5
times;
Hacking
3
times;
Web App Attack
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 257 port scanning attempts on 23-10-2026. For more information or to rep ...
show moreThis IP address carried out 257 port scanning attempts on 23-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 44 SSH credential attack (attempts) on 23-10-2026. For more information ...
show moreThis IP address carried out 44 SSH credential attack (attempts) on 23-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Funeypot detected 18 ssh attempts in 23m12s. Last by user "root", password "Adm***123", client "libs ...
show moreFuneypot detected 18 ssh attempts in 23m12s. Last by user "root", password "Adm***123", client "libssh_0.9.6".
show less
Funeypot detected 5 ssh attempts in 7m5s. Last by user "root", password "1234****abcd", client "libs ...
show moreFuneypot detected 5 ssh attempts in 7m5s. Last by user "root", password "1234****abcd", client "libssh_0.9.6".
show less
Blocked by IDS: crowdsecurity/ssh-slow-bf (24 events)
Brute-Force
SSH
Anonymous
SSH scanning: repeated logins with invalid usernames against a key-only server. Reported by fail2ban ...
show moreSSH scanning: repeated logins with invalid usernames against a key-only server. Reported by fail2ban.
show less
2026-10-23T10:16:26.999473+02:00 s0 sshd[1554301]: Failed password for root from 198.20.133.119 port ...
show more2026-10-23T10:16:26.999473+02:00 s0 sshd[1554301]: Failed password for root from 198.20.133.119 port 51824 ssh2
2026-10-23T10:17:43.159387+02:00 s0 sshd[1554415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.119 user=root
2026-10-23T10:17:46.006921+02:00 s0 sshd[1554415]: Failed password for root from 198.20.133.119 port 57182 ssh2
...
show less
Oct 23 06:03:55 v4bgp sshd[3902533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreOct 23 06:03:55 v4bgp sshd[3902533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.119
Oct 23 06:03:57 v4bgp sshd[3902533]: Failed password for invalid user upgrade from 198.20.133.119 port 51106 ssh2
Oct 23 06:07:31 v4bgp sshd[3902625]: Invalid user rootadmin from 198.20.133.119 port 55744
...
show less
TSEC Honeypot Network report. Threat score: 99/100. Categories: Port Scan, Hacking, Brute-Force, Exp ...
show moreTSEC Honeypot Network report. Threat score: 99/100. Categories: Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie. Context: Attacker IP 198.20.133.119 observed using SSH client fingerprint 'Unknown SSH Client (f555226df196)' 22 times when connecting to a healthcare sector honeypot between 2026-10-23 03:26 and 2026-10-23....
show less
Port Scan
Hacking
Brute-Force
Exploited Host
Web App Attack
SSH
