Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
124.89.119.4 botsattackproxy
Vulnerability Scanner
2025-03-25 21:45:04
124.89.119.9 attackbotsspam
Detected by ModSecurity. Host header is an IP address, Request URI: /HNAP1/
2020-08-07 20:01:32
124.89.119.8 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 5436457cbdb79875 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 05:09:50
124.89.119.11 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5414b31affa2e4d9 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:49:58
124.89.119.11 bots
124.89.119.11 - - [23/Apr/2019:13:55:45 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
112.80.137.106 - - [23/Apr/2019:13:55:45 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
2019-04-23 13:58:05
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.89.119.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;124.89.119.2.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 14:25:24 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 2.119.89.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.119.89.124.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
119.28.132.211 attackspam
Jul 25 07:09:11 electroncash sshd[49056]: Invalid user apps from 119.28.132.211 port 52994
Jul 25 07:09:11 electroncash sshd[49056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211 
Jul 25 07:09:11 electroncash sshd[49056]: Invalid user apps from 119.28.132.211 port 52994
Jul 25 07:09:13 electroncash sshd[49056]: Failed password for invalid user apps from 119.28.132.211 port 52994 ssh2
Jul 25 07:12:58 electroncash sshd[50028]: Invalid user maneesh from 119.28.132.211 port 58382
...
2020-07-25 13:23:33
189.154.139.44 attackspam
2020-07-25T07:07:03.616210sd-86998 sshd[47316]: Invalid user test from 189.154.139.44 port 39814
2020-07-25T07:07:03.618824sd-86998 sshd[47316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.154.139.44
2020-07-25T07:07:03.616210sd-86998 sshd[47316]: Invalid user test from 189.154.139.44 port 39814
2020-07-25T07:07:06.082473sd-86998 sshd[47316]: Failed password for invalid user test from 189.154.139.44 port 39814 ssh2
2020-07-25T07:11:36.507079sd-86998 sshd[47843]: Invalid user arina from 189.154.139.44 port 54396
...
2020-07-25 13:58:24
159.89.48.237 attackspam
CMS (WordPress or Joomla) login attempt.
2020-07-25 13:54:48
134.209.63.140 attackspam
Jul 25 05:54:41 debian-2gb-nbg1-2 kernel: \[17907798.620294\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=6127 PROTO=TCP SPT=43052 DPT=30408 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-25 13:22:43
111.72.194.105 attackspambots
Jul 25 06:49:42 srv01 postfix/smtpd\[7689\]: warning: unknown\[111.72.194.105\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 25 06:53:11 srv01 postfix/smtpd\[7689\]: warning: unknown\[111.72.194.105\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 25 06:53:23 srv01 postfix/smtpd\[7689\]: warning: unknown\[111.72.194.105\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 25 06:53:39 srv01 postfix/smtpd\[7689\]: warning: unknown\[111.72.194.105\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 25 06:54:01 srv01 postfix/smtpd\[7689\]: warning: unknown\[111.72.194.105\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-25 13:09:15
139.155.39.62 attack
2020-07-25T06:58:02.214638vps751288.ovh.net sshd\[16395\]: Invalid user aly from 139.155.39.62 port 44860
2020-07-25T06:58:02.223236vps751288.ovh.net sshd\[16395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.39.62
2020-07-25T06:58:04.416714vps751288.ovh.net sshd\[16395\]: Failed password for invalid user aly from 139.155.39.62 port 44860 ssh2
2020-07-25T07:02:24.237434vps751288.ovh.net sshd\[16425\]: Invalid user harish from 139.155.39.62 port 40462
2020-07-25T07:02:24.246172vps751288.ovh.net sshd\[16425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.39.62
2020-07-25 13:42:50
88.220.68.208 attackbotsspam
Brute force attempt
2020-07-25 13:27:04
2401:4900:51c9:b502:4c99:8d7b:6240:900 attackbots
Wordpress attack
2020-07-25 13:59:00
167.99.101.199 attackbots
167.99.101.199 - - [25/Jul/2020:05:54:51 +0200] "GET /wp-login.php HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.101.199 - - [25/Jul/2020:05:54:55 +0200] "POST /wp-login.php HTTP/1.1" 200 6649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.101.199 - - [25/Jul/2020:05:55:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-25 13:14:19
222.209.131.130 attackspambots
2020-07-25T06:50:25.144102mail.standpoint.com.ua sshd[19368]: Invalid user bernard from 222.209.131.130 port 52892
2020-07-25T06:50:25.146673mail.standpoint.com.ua sshd[19368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.209.131.130
2020-07-25T06:50:25.144102mail.standpoint.com.ua sshd[19368]: Invalid user bernard from 222.209.131.130 port 52892
2020-07-25T06:50:27.049893mail.standpoint.com.ua sshd[19368]: Failed password for invalid user bernard from 222.209.131.130 port 52892 ssh2
2020-07-25T06:52:53.815431mail.standpoint.com.ua sshd[19743]: Invalid user backup from 222.209.131.130 port 59614
...
2020-07-25 13:47:55
115.171.86.128 attack
Automatic Fail2ban report - Trying login SSH
2020-07-25 13:23:57
106.12.119.218 attackspambots
Invalid user qy from 106.12.119.218 port 42086
2020-07-25 13:26:07
119.97.221.88 attack
07/24/2020-23:54:58.299276 119.97.221.88 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-25 13:15:36
211.239.124.243 attackspam
Jul 25 07:35:11 hosting sshd[429]: Invalid user ssl from 211.239.124.243 port 54550
...
2020-07-25 13:07:53
222.186.180.8 attackbotsspam
Jul 25 07:10:48 abendstille sshd\[11280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8  user=root
Jul 25 07:10:50 abendstille sshd\[11280\]: Failed password for root from 222.186.180.8 port 50640 ssh2
Jul 25 07:10:53 abendstille sshd\[11280\]: Failed password for root from 222.186.180.8 port 50640 ssh2
Jul 25 07:11:05 abendstille sshd\[11652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8  user=root
Jul 25 07:11:07 abendstille sshd\[11652\]: Failed password for root from 222.186.180.8 port 55582 ssh2
...
2020-07-25 13:13:20

Recently Reported IPs

124.89.118.4 124.89.119.4 124.89.119.14 124.89.33.206
124.89.50.218 124.89.48.150 124.89.90.53 124.89.86.212
124.89.90.59 124.89.89.147 124.89.89.146 124.9.129.38
124.90.48.38 124.90.48.88 124.89.86.152 124.90.49.221
124.90.50.113 124.90.49.187 124.90.49.54 124.90.51.247