119.118.11.220

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.118.11.212	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5411ae6ebd719292 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.082584686 Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:15:07
119.118.112.120	attack	firewall-block, port(s): 23/tcp	2019-11-03 18:42:11
119.118.110.252	attack	Port Scan	2019-10-21 20:19:00

Type

Details

Datetime

119.118.11.212

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5411ae6ebd719292 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.082584686 Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:15:07

119.118.112.120

attack

firewall-block, port(s): 23/tcp

2019-11-03 18:42:11

119.118.110.252

attack

Port Scan

2019-10-21 20:19:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.118.11.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55992
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.118.11.220.			IN	A

;; AUTHORITY SECTION:
.			232	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 17:54:42 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 220.11.118.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 220.11.118.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.30.35	attack	SSH Bruteforce attempt	2020-02-05 14:50:42
119.115.130.234	attackspam	Feb 5 06:17:58 game-panel sshd[32434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.115.130.234 Feb 5 06:18:00 game-panel sshd[32434]: Failed password for invalid user albina from 119.115.130.234 port 33082 ssh2 Feb 5 06:24:06 game-panel sshd[32750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.115.130.234	2020-02-05 14:49:57
163.172.119.155	attack	[2020-02-05 01:22:39] NOTICE[1148] chan_sip.c: Registration from '"632"' failed for '163.172.119.155:5466' - Wrong password [2020-02-05 01:22:39] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-05T01:22:39.776-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="632",SessionID="0x7fd82cb29a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/5466",Challenge="4bb3438a",ReceivedChallenge="4bb3438a",ReceivedHash="3c85cbdc978facaa3f216cc11c78bf6e" [2020-02-05 01:23:59] NOTICE[1148] chan_sip.c: Registration from '"633"' failed for '163.172.119.155:5566' - Wrong password [2020-02-05 01:23:59] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-05T01:23:59.725-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="633",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163. ...	2020-02-05 15:08:02
80.70.18.18	attackspam	Fail2Ban Ban Triggered	2020-02-05 15:22:37
54.37.158.218	attackspambots	Feb 5 07:10:27 legacy sshd[21987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.218 Feb 5 07:10:29 legacy sshd[21987]: Failed password for invalid user lcbarr from 54.37.158.218 port 38603 ssh2 Feb 5 07:13:47 legacy sshd[22142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.218 ...	2020-02-05 14:48:03
103.22.250.194	attack	MYH,DEF GET /wp-login.php	2020-02-05 14:50:11
85.174.121.107	attackbots	20/2/4@23:52:11: FAIL: Alarm-Network address from=85.174.121.107 20/2/4@23:52:11: FAIL: Alarm-Network address from=85.174.121.107 ...	2020-02-05 15:27:41
51.89.99.60	attackbotsspam	Attack from IP 51.89.99.60 of AbuseIPDB categories 18,22 triggering fail2ban.	2020-02-05 14:57:12
1.245.61.144	attackbotsspam	Feb 5 08:17:11 dedicated sshd[14579]: Invalid user piranha from 1.245.61.144 port 53548	2020-02-05 15:26:09
151.3.36.69	attack	Automatic report - Port Scan Attack	2020-02-05 14:58:10
14.169.233.52	attackspam	Feb 5 06:28:06 mail postfix/smtpd[6149]: warning: unknown[14.169.233.52]: SASL PLAIN authentication failed	2020-02-05 15:05:38
122.51.23.135	attackbotsspam	Unauthorized connection attempt detected from IP address 122.51.23.135 to port 2220 [J]	2020-02-05 14:41:25
217.194.205.108	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/217.194.205.108/ IL - 1H : (1) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IL NAME ASN : ASN20623 IP : 217.194.205.108 CIDR : 217.194.192.0/20 PREFIX COUNT : 1 UNIQUE IP COUNT : 4096 ATTACKS DETECTED ASN20623 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2020-02-05 05:53:20 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2020-02-05 14:42:49
113.190.253.205	attackbots	20/2/4@23:53:09: FAIL: Alarm-Network address from=113.190.253.205 ...	2020-02-05 14:47:04
177.5.190.60	attackbotsspam	Feb 5 05:52:13 grey postfix/smtpd\[26510\]: NOQUEUE: reject: RCPT from unknown\[177.5.190.60\]: 554 5.7.1 Service unavailable\; Client host \[177.5.190.60\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=177.5.190.60\; from=\ to=\<20120511145716.18177t1eh8odvik0@mail.ajrg.hu\> proto=ESMTP helo=\<\[177.5.190.60\]\> ...	2020-02-05 15:23:58

Recently Reported IPs

119.118.11.176	119.118.11.60	116.52.118.129	119.118.114.151
119.118.11.89	116.52.118.154	116.52.118.161	116.52.118.183
119.118.19.63	119.118.2.104	119.118.19.69	119.118.19.78
119.118.2.116	119.118.19.79	119.118.2.23	119.118.2.132
119.118.2.143	119.118.2.200	119.118.2.153	119.118.2.15