119.118.2.57 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
119.118.27.27	attack	firewall-block, port(s): 1024/tcp, 4433/tcp	2020-08-08 04:15:58
119.118.21.230	attackbots	Web Server Scan. RayID: 59280c2b6e9aed9b, UA: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.33 Safari/534.3 SE 2.X MetaSr 1.0, Country: CN	2020-05-21 04:04:40
119.118.22.151	attack	Unauthorized connection attempt detected from IP address 119.118.22.151 to port 999 [J]	2020-03-02 21:00:27
119.118.26.193	attackspam	Unauthorized connection attempt detected from IP address 119.118.26.193 to port 8081 [J]	2020-01-27 00:18:26
119.118.23.161	attackbots	Unauthorized connection attempt detected from IP address 119.118.23.161 to port 8899 [J]	2020-01-26 05:03:12
119.118.24.91	attackspam	Unauthorized connection attempt detected from IP address 119.118.24.91 to port 81 [T]	2020-01-22 07:45:34
119.118.29.150	attack	Unauthorized connection attempt detected from IP address 119.118.29.150 to port 992	2020-01-01 03:40:57
119.118.21.222	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543664298995eb49 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:36:03
119.118.21.24	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5435d46f9ddfe7e9 \| WAF_Rule_ID: 1122843 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:05:57
119.118.24.84	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5437c1878e56eb45 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:18:51
119.118.27.192	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5434ef16495d9911 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 01:53:49
119.118.22.232	attack	[Wed Sep 25 10:55:05.094727 2019] [:error] [pid 25530:tid 140164544657152] [client 119.118.22.232:42178] [client 119.118.22.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/normal_login.js"] [unique_id "XYrlGbOU0eqZhpNuV9g9WwAAAMI"] ...	2019-09-25 13:24:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.118.2.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;119.118.2.57.			IN	A

;; AUTHORITY SECTION:
.			227	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 186 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 12:15:14 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 57.2.118.119.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.2.118.119.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.210.144.234	attackspam	Automatic report - Port Scan Attack	2019-11-13 07:16:32
74.58.106.15	attackbots	Nov 12 23:30:57 vps58358 sshd\[24397\]: Invalid user ens from 74.58.106.15Nov 12 23:31:00 vps58358 sshd\[24397\]: Failed password for invalid user ens from 74.58.106.15 port 56306 ssh2Nov 12 23:34:36 vps58358 sshd\[24412\]: Invalid user ngah from 74.58.106.15Nov 12 23:34:38 vps58358 sshd\[24412\]: Failed password for invalid user ngah from 74.58.106.15 port 37302 ssh2Nov 12 23:38:16 vps58358 sshd\[24424\]: Invalid user boertje from 74.58.106.15Nov 12 23:38:18 vps58358 sshd\[24424\]: Failed password for invalid user boertje from 74.58.106.15 port 46502 ssh2 ...	2019-11-13 07:21:05
177.21.133.159	attack	Automatic report - Port Scan Attack	2019-11-13 07:42:59
109.244.96.201	attack	47 failed attempt(s) in the last 24h	2019-11-13 07:10:14
94.19.209.109	attackspam	Nov 13 00:34:28 OPSO sshd\[30816\]: Invalid user test from 94.19.209.109 port 41598 Nov 13 00:34:28 OPSO sshd\[30816\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.19.209.109 Nov 13 00:34:30 OPSO sshd\[30816\]: Failed password for invalid user test from 94.19.209.109 port 41598 ssh2 Nov 13 00:38:22 OPSO sshd\[31599\]: Invalid user colquhoun from 94.19.209.109 port 49730 Nov 13 00:38:22 OPSO sshd\[31599\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.19.209.109	2019-11-13 07:39:00
122.51.55.171	attackbots	42 failed attempt(s) in the last 24h	2019-11-13 07:08:14
78.155.200.91	attack	Invalid user guest from 78.155.200.91 port 47436	2019-11-13 07:31:35
110.10.189.64	attack	$f2bV_matches	2019-11-13 07:42:30
106.13.45.212	attackspambots	Nov 13 00:08:16 localhost sshd\[10971\]: Invalid user ftp from 106.13.45.212 port 47998 Nov 13 00:08:16 localhost sshd\[10971\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 Nov 13 00:08:19 localhost sshd\[10971\]: Failed password for invalid user ftp from 106.13.45.212 port 47998 ssh2	2019-11-13 07:14:56
77.247.110.16	attackspambots	\[2019-11-12 18:11:08\] NOTICE\[2601\] chan_sip.c: Registration from '"104" \' failed for '77.247.110.16:5232' - Wrong password \[2019-11-12 18:11:08\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-12T18:11:08.744-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7fdf2c4195a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.16/5232",Challenge="2409c305",ReceivedChallenge="2409c305",ReceivedHash="875eac244c0243b6742a6c8dac94243c" \[2019-11-12 18:11:08\] NOTICE\[2601\] chan_sip.c: Registration from '"104" \' failed for '77.247.110.16:5232' - Wrong password \[2019-11-12 18:11:08\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-12T18:11:08.862-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="104",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-11-13 07:24:31
36.111.171.108	attack	49 failed attempt(s) in the last 24h	2019-11-13 07:13:41
91.134.141.89	attackspambots	Nov 13 00:21:14 sd-53420 sshd\[6030\]: Invalid user test10 from 91.134.141.89 Nov 13 00:21:14 sd-53420 sshd\[6030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.141.89 Nov 13 00:21:16 sd-53420 sshd\[6030\]: Failed password for invalid user test10 from 91.134.141.89 port 35380 ssh2 Nov 13 00:24:28 sd-53420 sshd\[7034\]: Invalid user vacher from 91.134.141.89 Nov 13 00:24:28 sd-53420 sshd\[7034\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.141.89 ...	2019-11-13 07:40:45
119.82.68.254	attackspam	Automatic report - Banned IP Access	2019-11-13 07:24:04
148.70.1.30	attackspam	51 failed attempt(s) in the last 24h	2019-11-13 07:30:13
114.32.40.97	attackbots	3389BruteforceFW23	2019-11-13 07:45:16

Recently Reported IPs

119.118.2.251	119.118.2.71	119.118.20.203	119.118.20.208
119.118.20.227	119.118.20.34	119.118.20.72	119.118.21.178
119.118.222.20	119.118.210.216	119.118.22.29	119.118.21.20
119.118.23.49	119.118.23.67	119.118.24.170	119.118.25.122
119.118.24.19	119.118.25.214	119.118.26.117	119.118.25.215