SecureFeed - Is 119.3.230.28 Malicious? Host Analysis

Results for 119.3.230.28

Classification:

malicious

IP:

119.3.230.28

EntityType:

Tags:

ssh http route router net telnet irc reg

Malicious Tags:

attack malicious flood spy spyware virus route unauthorized bruteforce scanning malware phishing threat

Country:

City:

Beijing

State:

Beijing

Postal Code:

N/A

Lat/Lon:

39.9042°, 116.4070°

ISP Name:

Huawei Cloud Service data center

ISP Network:

119.3.0.0/16

Source	Description	Last Seen
Blocklist.de	Detected by fail2ban	04/30/2026 23:45:09 (UTC)
Blocklist.de	Attacks on SSH services	04/10/2026 08:45:14 (UTC)
CINS Army List	Malicious activity detected	04/16/2026 03:00:25 (UTC)
Blocklist.net.ua	Malicous host due to: HTTP flood requests to the websites	04/10/2026 09:28:52 (UTC)
FireHol	Host involved with attacks, spyware or viruses	05/01/2026 06:00:39 (UTC)
Project Turris	this blocklist contains IP addresses that have attempted to access services on Turris routers or gain unauthorized access	04/11/2026 00:08:33 (UTC)
APNIC Community Honeynet Project	Involved in SSH brute-force attacks	04/10/2026 07:03:20 (UTC)
APNIC Community Honeynet Project	Involved in Telnet brute-force attacks	04/10/2026 14:27:34 (UTC)
James Brine	Associated with Brute-force attacks	05/14/2026 00:03:07 (UTC)
GreenSnow	Marked for involvement in attacks or bruteforce activities	04/11/2026 11:30:14 (UTC)
HoneyDB	Detected by network honeypots as engaging in suspicious activities, possibly indicative of scanning attempts, automated attacks, or other malicious behaviors	04/11/2026 00:00:00 (UTC)
IPsum	Associated with various online threats, including cyberattacks, malware distribution, phishing, and other malicious activities	05/02/2026 00:01:48 (UTC)
Blocklist.de	Attacks using RFI, REG-Bots, IRC-Bots or BadBots	04/30/2026 23:45:23 (UTC)