Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-08T03:12:13.099791+00:00 robotstxt-lucia sshd[583128]: Invalid user james from 8.219.107.192 port 48134
2026-11-08T03:18:42.392776+00:00 robotstxt-lucia sshd[583764]: Invalid user ubuntu from 8.219.107.192 port 42778
2026-11-08T03:19:19.29389 ...
show more2026-11-08T03:12:13.099791+00:00 robotstxt-lucia sshd[583128]: Invalid user james from 8.219.107.192 port 48134
2026-11-08T03:18:42.392776+00:00 robotstxt-lucia sshd[583764]: Invalid user ubuntu from 8.219.107.192 port 42778
2026-11-08T03:19:19.293892+00:00 robotstxt-lucia sshd[583850]: Invalid user webapp from 8.219.107.192 port 50574
...
show less
2026-11-06T22:01:02.996927+00:00 eu01.ivory.host sshd[836800]: Failed password for invalid user gx4 from 8.219.107.192 port 50850 ssh2
2026-11-06T22:01:03.975530+00:00 eu01.ivory.host sshd[836800]: error: maximum authentication attempts exceeded for ...
show more2026-11-06T22:01:02.996927+00:00 eu01.ivory.host sshd[836800]: Failed password for invalid user gx4 from 8.219.107.192 port 50850 ssh2
2026-11-06T22:01:03.975530+00:00 eu01.ivory.host sshd[836800]: error: maximum authentication attempts exceeded for invalid user gx4 from 8.219.107.192 port 50850 ssh2 [preauth]
2026-11-06T22:01:48.815120+00:00 eu01.ivory.host sshd[838793]: Invalid user kvm from 8.219.107.192 port 51628
2026-11-06T22:01:48.816996+00:00 eu01.ivory.host sshd[838793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.219.107.192
2026-11-06T22:01:50.611942+00:00 eu01.ivory.host sshd[838793]: Failed password for invalid user kvm from 8.219.107.192 port 51628 ssh2
...
show less
ICS Labs threat intelligence (ICS Feeds): Port Scan, Brute-Force. Last observed 2026-11-05 UTC.
Port Scan
Brute-Force
Anonymous
2026-11-05T03:05:27.473813jorgearce.es sshd[14065]: Failed password for root from 8.219.107.192 port 58276 ssh2
2026-11-05T03:06:03.002704jorgearce.es sshd[14269]: Invalid user user from 8.219.107.192 port 60012
2026-11-05T03:06:03.111156jorgearce.es ...
show more2026-11-05T03:05:27.473813jorgearce.es sshd[14065]: Failed password for root from 8.219.107.192 port 58276 ssh2
2026-11-05T03:06:03.002704jorgearce.es sshd[14269]: Invalid user user from 8.219.107.192 port 60012
2026-11-05T03:06:03.111156jorgearce.es sshd[14269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.219.107.192
2026-11-05T03:06:05.365861jorgearce.es sshd[14269]: Failed password for invalid user user from 8.219.107.192 port 60012 ssh2
2026-11-05T03:07:27.979103jorgearce.es sshd[14626]: Invalid user ivan from 8.219.107.192 port 57190
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
T: f2b ssh aggressive 3x
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: deploy, Pass: [REDACTED]
Automated honeypot probe on TCP/2222: unused service port was contacted (likely scanner/botnet). Reported by Banua Cloud MikroTik router "Distri249". Source: Banua Cloud MikroTik abuse desk.