119.118.11.147

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.118.11.212	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5411ae6ebd719292 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.082584686 Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:15:07
119.118.112.120	attack	firewall-block, port(s): 23/tcp	2019-11-03 18:42:11
119.118.110.252	attack	Port Scan	2019-10-21 20:19:00

Type

Details

Datetime

119.118.11.212

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5411ae6ebd719292 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.082584686 Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:15:07

119.118.112.120

attack

firewall-block, port(s): 23/tcp

2019-11-03 18:42:11

119.118.110.252

attack

Port Scan

2019-10-21 20:19:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.118.11.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.118.11.147.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 14:04:36 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 147.11.118.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 147.11.118.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
71.135.5.77	attackbots	2019-10-27 04:54:32,148 fail2ban.actions: WARNING [ssh] Ban 71.135.5.77	2019-10-27 14:37:25
185.95.186.67	attackspam	Automatic report - Port Scan Attack	2019-10-27 14:54:13
182.61.166.179	attack	Oct 27 06:10:20 venus sshd\[9816\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.166.179 user=root Oct 27 06:10:23 venus sshd\[9816\]: Failed password for root from 182.61.166.179 port 33146 ssh2 Oct 27 06:14:16 venus sshd\[9910\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.166.179 user=root ...	2019-10-27 14:29:27
89.248.160.193	attackbots	Portscan or hack attempt detected by psad/fwsnort	2019-10-27 14:44:20
128.199.157.28	attackspam	Oct 27 08:13:19 hosting sshd[17854]: Invalid user abot from 128.199.157.28 port 45504 ...	2019-10-27 14:53:04
51.75.147.100	attackspambots	$f2bV_matches	2019-10-27 14:38:36
101.231.104.82	attack	Oct 27 00:50:14 firewall sshd[26783]: Invalid user Losenord1qaz from 101.231.104.82 Oct 27 00:50:16 firewall sshd[26783]: Failed password for invalid user Losenord1qaz from 101.231.104.82 port 36922 ssh2 Oct 27 00:54:44 firewall sshd[27040]: Invalid user 123456 from 101.231.104.82 ...	2019-10-27 14:28:52
45.45.45.45	attack	27.10.2019 04:55:36 Recursive DNS scan	2019-10-27 14:25:14
200.119.125.194	attackspambots	Sent mail to target address hacked/leaked from abandonia in 2016	2019-10-27 14:31:02
218.1.18.78	attackbotsspam	Oct 27 06:00:24 DAAP sshd[4931]: Invalid user tomcat4 from 218.1.18.78 port 34164 Oct 27 06:00:24 DAAP sshd[4931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.18.78 Oct 27 06:00:24 DAAP sshd[4931]: Invalid user tomcat4 from 218.1.18.78 port 34164 Oct 27 06:00:26 DAAP sshd[4931]: Failed password for invalid user tomcat4 from 218.1.18.78 port 34164 ssh2 Oct 27 06:08:38 DAAP sshd[5091]: Invalid user vmware from 218.1.18.78 port 60801 ...	2019-10-27 14:39:57
206.161.150.37	attack	Oct 27 09:11:04 ns postfix/smtpd[21052]: NOQUEUE: reject: RCPT from unknown[206.161.150.37]: 554 5.7.1 : Helo command rejected: Access denied; from= to=<@> proto=ESMTP helo=	2019-10-27 14:32:35
110.93.222.6	attackbotsspam	SASL Brute Force	2019-10-27 15:04:28
165.22.208.56	attackspam	RDP Bruteforce	2019-10-27 14:46:58
61.19.22.162	attackbotsspam	Oct 27 02:00:52 firewall sshd[29521]: Failed password for root from 61.19.22.162 port 46440 ssh2 Oct 27 02:05:38 firewall sshd[29682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.22.162 user=root Oct 27 02:05:40 firewall sshd[29682]: Failed password for root from 61.19.22.162 port 56282 ssh2 ...	2019-10-27 15:05:26
157.230.243.22	attack	Wordpress bruteforce	2019-10-27 14:28:01

Recently Reported IPs

119.118.15.105	119.118.12.66	119.118.12.179	119.118.14.36
119.118.15.124	119.118.16.139	119.118.16.177	119.118.16.213
119.118.15.170	119.118.17.13	119.118.17.225	119.118.17.242
119.118.17.207	119.118.17.36	119.118.17.133	119.118.18.158
119.118.18.171	119.118.17.235	119.118.19.160	119.118.19.222