119.118.12.113

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Liaoning Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	The IP has triggered Cloudflare WAF. CF-Ray: 543283c5ca0fe801 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:11:50

Type

Details

Datetime

attack

The IP has triggered Cloudflare WAF. CF-Ray: 543283c5ca0fe801 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 05:11:50

Comments on same subnet:

IP	Type	Details	Datetime
119.118.128.21	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-02 03:42:49
119.118.128.21	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-01 19:55:36
119.118.128.21	attack	23/tcp [2020-09-30]1pkt	2020-10-01 12:03:57
119.118.12.71	attackspambots	Unauthorized connection attempt detected from IP address 119.118.12.71 to port 999 [J]	2020-03-02 19:08:08
119.118.12.82	attackbots	Unauthorized connection attempt detected from IP address 119.118.12.82 to port 8443 [J]	2020-03-02 18:38:19
119.118.12.240	attackspambots	Bad bot requested remote resources	2019-11-19 20:27:50
119.118.126.35	attackspam	Unauthorised access (Jun 28) SRC=119.118.126.35 LEN=40 TTL=49 ID=38483 TCP DPT=23 WINDOW=64149 SYN	2019-06-29 05:33:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.118.12.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52636
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.118.12.113.			IN	A

;; AUTHORITY SECTION:
.			477	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 128 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 05:11:47 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 113.12.118.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.12.118.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.76.39.105	attack	SSH invalid-user multiple login try	2020-06-06 18:26:38
87.251.74.50	attackspam	Jun 6 12:21:12 vps639187 sshd\[12006\]: Invalid user support from 87.251.74.50 port 65108 Jun 6 12:21:13 vps639187 sshd\[12005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.50 user=root Jun 6 12:21:13 vps639187 sshd\[12006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.50 ...	2020-06-06 18:28:27
106.13.32.165	attackspam	Jun 6 10:07:16 ns41 sshd[11983]: Failed password for root from 106.13.32.165 port 48236 ssh2 Jun 6 10:07:16 ns41 sshd[11983]: Failed password for root from 106.13.32.165 port 48236 ssh2	2020-06-06 18:22:31
167.99.77.94	attackspam	2020-06-06T05:27:26.957634shield sshd\[3669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 user=root 2020-06-06T05:27:29.107423shield sshd\[3669\]: Failed password for root from 167.99.77.94 port 55092 ssh2 2020-06-06T05:31:13.318662shield sshd\[4763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 user=root 2020-06-06T05:31:15.297837shield sshd\[4763\]: Failed password for root from 167.99.77.94 port 58016 ssh2 2020-06-06T05:35:10.610830shield sshd\[5835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 user=root	2020-06-06 18:30:04
198.108.67.18	attack	TCP (SYN) 198.108.67.18:49612 -> port 22, len 44	2020-06-06 18:34:20
104.131.71.105	attackspambots	prod6 ...	2020-06-06 18:31:26
5.235.153.72	attackbots	Unauthorized connection attempt from IP address 5.235.153.72 on Port 445(SMB)	2020-06-06 18:09:49
119.226.11.100	attackbots	SSH Brute-Force reported by Fail2Ban	2020-06-06 18:24:02
103.68.68.23	attackbotsspam	Invalid user sftp from 103.68.68.23 port 32886	2020-06-06 18:06:25
159.65.41.159	attackbots	(sshd) Failed SSH login from 159.65.41.159 (US/United States/ubuntu16.04-x62-7dtd): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 6 08:41:38 ubnt-55d23 sshd[15675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.41.159 user=root Jun 6 08:41:41 ubnt-55d23 sshd[15675]: Failed password for root from 159.65.41.159 port 42434 ssh2	2020-06-06 18:38:24
190.64.68.178	attackbotsspam	2020-06-06T16:50:18.275911billing sshd[7779]: Failed password for root from 190.64.68.178 port 3955 ssh2 2020-06-06T16:53:43.711599billing sshd[14951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178 user=root 2020-06-06T16:53:45.558360billing sshd[14951]: Failed password for root from 190.64.68.178 port 3956 ssh2 ...	2020-06-06 18:13:54
42.61.13.174	attack	MVPower DVR TV Shell Unauthenticated Command Execution Vulnerability	2020-06-06 18:05:38
219.250.188.72	attackbots	Jun 6 10:12:51 vlre-nyc-1 sshd\[12154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.72 user=root Jun 6 10:12:53 vlre-nyc-1 sshd\[12154\]: Failed password for root from 219.250.188.72 port 53661 ssh2 Jun 6 10:17:48 vlre-nyc-1 sshd\[12310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.72 user=root Jun 6 10:17:50 vlre-nyc-1 sshd\[12310\]: Failed password for root from 219.250.188.72 port 55203 ssh2 Jun 6 10:21:38 vlre-nyc-1 sshd\[12404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.72 user=root ...	2020-06-06 18:29:07
120.228.190.140	attackspambots	(ftpd) Failed FTP login from 120.228.190.140 (CN/China/-): 10 in the last 3600 secs	2020-06-06 18:24:45
45.153.241.224	attackspam	(mod_security) mod_security (id:218420) triggered by 45.153.241.224 (DE/Germany/-): 5 in the last 3600 secs	2020-06-06 18:33:54

Recently Reported IPs

110.80.154.170	110.80.152.195	106.45.1.105	106.45.1.5
106.45.0.17	106.11.222.169	58.248.201.238	58.248.201.129
49.7.4.162	49.7.4.154	42.200.181.241	46.62.6.196
2a01:4f9:2b:464:1::2	36.110.199.149	36.32.3.105	27.224.136.162
14.199.117.154	1.202.112.54	223.166.74.245	223.166.74.244