Significant Threat
IP 119.96.131.105 is a high-risk address linked to persistent SSH brute-force attacks, with a threat level of 8/10 and 160 abuse reports logged by automated honeypot sensors. Operating from the CHINANET Hubei province network in China (AS58563), this IP demonstrates clear malicious intent against exposed SSH services, representing a concrete threat to server security.
The IP has generated 160 reports with a 98% confidence score and an activity frequency of 8/10, with both first and most recent reports dated February 2026. Of the categorized threats, SSH attacks account for 13 reports while general hacking activity comprises 8 reports, all detected across 17 separate automated honeypot sensors. Honeypot logs document a consistent pattern of repeated SSH brute-force attempts followed by SSH activity and command-input behavior, indicating the attackers successfully progressed through authentication stages before issuing commands on simulated systems.
SSH brute-force attacks systematically attempt to guess server credentials by rapidly cycling through username and password combinations, exploiting weak or default credentials on exposed services. The concrete risk includes complete server compromise with root-level access, enabling data theft, malware deployment, botnet recruitment, or lateral movement into connected networks. The presence of command-input activity in the logs suggests automated tools are executing multi-stage attack sequences beyond initial authentication attempts, escalating the severity beyond simple credential testing.
Administrators should immediately restrict SSH access by deploying key-based authentication instead of passwords, changing the default port from 22, and disabling direct root login. Implementing tools such as fail2ban can dynamically block repeated connection attempts from offending IP addresses. All SSH services should be kept current with security patches, and network-level access controls should limit exposure to trusted IP ranges where feasible.
RO 
BG 
JP 
BE 
AR 
KR