Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Xi’an

Region: Shaanxi

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
124.89.119.4 botsattackproxy 
Vulnerability Scanner
 2025-03-25 21:45:04
124.89.119.9 attackbotsspam 
Detected by ModSecurity. Host header is an IP address, Request URI: /HNAP1/
 2020-08-07 20:01:32
124.89.119.8 attackbotsspam 
The IP has triggered Cloudflare WAF. CF-Ray: 5436457cbdb79875 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-12 05:09:50
124.89.119.11 attackspam 
The IP has triggered Cloudflare WAF. CF-Ray: 5414b31affa2e4d9 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
 2019-12-08 03:49:58
124.89.119.11 bots 
124.89.119.11 - - [23/Apr/2019:13:55:45 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
112.80.137.106 - - [23/Apr/2019:13:55:45 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
121.57.228.33 - - [23/Apr/2019:13:55:46 +0800] "GET /view/img/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
 2019-04-23 13:58:05
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.89.119.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4676
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;124.89.119.91.			IN	A

;; AUTHORITY SECTION:
.			521	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024032200 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 22 16:55:54 CST 2024
;; MSG SIZE  rcvd: 106
Host info
Host 91.119.89.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 91.119.89.124.in-addr.arpa: NXDOMAIN
Related IP info:
124.89.119.21
124.89.119.20
124.89.119.245
124.89.119.154
124.89.119.37
124.89.119.50
124.89.119.72
124.89.119.5
124.89.119.98
124.89.119.222
124.89.119.183
124.89.119.74
124.89.119.54
124.89.119.82
124.89.119.184
124.89.119.85
124.89.119.52
124.89.119.139
124.89.119.45
124.89.119.99
124.89.119.44
124.89.119.27
124.89.119.228
124.89.119.156
124.89.119.237
124.89.119.158
124.89.119.243
124.89.119.2
124.89.119.22
124.89.119.195
124.89.119.34
124.89.119.249
124.89.119.155
124.89.119.124
124.89.119.240
124.89.119.167
124.89.119.171
124.89.119.199
124.89.119.103
124.89.119.42
124.89.119.35
124.89.119.125
124.89.119.89
124.89.119.205
124.89.119.41
124.89.119.170
124.89.119.53
124.89.119.110
124.89.119.24
124.89.119.31
124.89.119.230
124.89.119.58
124.89.119.193
124.89.119.161
124.89.119.226
124.89.119.115
124.89.119.113
124.89.119.212
124.89.119.163
124.89.119.185
124.89.119.189
124.89.119.191
124.89.119.140
124.89.119.150
124.89.119.102
124.89.119.164
124.89.119.186
124.89.119.111
124.89.119.6
124.89.119.149
124.89.119.108
124.89.119.211
124.89.119.134
124.89.119.86
124.89.119.224
124.89.119.107
124.89.119.8
124.89.119.33
124.89.119.166
124.89.119.97
124.89.119.73
124.89.119.56
124.89.119.157
124.89.119.178
124.89.119.176
124.89.119.136
124.89.119.133
124.89.119.182
124.89.119.235
124.89.119.87
124.89.119.202
124.89.119.13
124.89.119.219
124.89.119.3
124.89.119.32
124.89.119.70
124.89.119.142
124.89.119.145
124.89.119.100
124.89.119.143
124.89.119.129
124.89.119.101
124.89.119.63
124.89.119.239
124.89.119.43
124.89.119.57
124.89.119.126
124.89.119.19
124.89.119.169
124.89.119.92
124.89.119.18
124.89.119.187
124.89.119.218
124.89.119.252
124.89.119.162
124.89.119.151
124.89.119.81
124.89.119.25
124.89.119.9
124.89.119.47
124.89.119.225
124.89.119.215
124.89.119.253
124.89.119.247
124.89.119.206
124.89.119.10
124.89.119.233
124.89.119.64
124.89.119.174
124.89.119.118
124.89.119.83
124.89.119.12
124.89.119.120
124.89.119.229
124.89.119.254
124.89.119.30
124.89.119.117
124.89.119.204
124.89.119.208
124.89.119.251
124.89.119.196
124.89.119.14
124.89.119.16
124.89.119.66
124.89.119.127
124.89.119.152
124.89.119.121
124.89.119.11
124.89.119.192
124.89.119.95
124.89.119.168
124.89.119.213
124.89.119.197
124.89.119.236
124.89.119.131
124.89.119.181
124.89.119.175
124.89.119.210
124.89.119.90
124.89.119.60
124.89.119.84
124.89.119.216
124.89.119.135
124.89.119.138
124.89.119.91
124.89.119.220
124.89.119.28
124.89.119.65
124.89.119.109
124.89.119.104
124.89.119.123
124.89.119.217
124.89.119.49
124.89.119.1
124.89.119.51
124.89.119.68
124.89.119.227
124.89.119.241
124.89.119.59
124.89.119.203
124.89.119.29
124.89.119.148
124.89.119.7
124.89.119.23
124.89.119.75
124.89.119.132
124.89.119.17
124.89.119.165
124.89.119.153
124.89.119.147
124.89.119.69
124.89.119.223
124.89.119.38
124.89.119.93
124.89.119.179
124.89.119.96
124.89.119.244
124.89.119.88
124.89.119.39
124.89.119.46
124.89.119.71
124.89.119.67
124.89.119.15
124.89.119.160
124.89.119.207
124.89.119.209
124.89.119.146
124.89.119.234
124.89.119.242
124.89.119.40
124.89.119.231
124.89.119.76
124.89.119.144
124.89.119.114
124.89.119.246
124.89.119.141
124.89.119.238
124.89.119.198
124.89.119.62
124.89.119.201
124.89.119.172
124.89.119.48
124.89.119.221
124.89.119.159
124.89.119.80
124.89.119.137
124.89.119.194
124.89.119.130
124.89.119.190
124.89.119.200
124.89.119.106
124.89.119.128
124.89.119.180
124.89.119.116
124.89.119.188
124.89.119.94
124.89.119.36
124.89.119.232
124.89.119.119
124.89.119.79
124.89.119.177
124.89.119.55
124.89.119.250
124.89.119.248
124.89.119.122
124.89.119.173
124.89.119.4
124.89.119.61
124.89.119.78
124.89.119.26
124.89.119.214
124.89.119.105
124.89.119.77
124.89.119.112
Related comments:
IP Type Details Datetime
61.155.138.100 attackspambots 
2020-09-20T16:15:39.542857abusebot-2.cloudsearch.cf sshd[25712]: Invalid user user from 61.155.138.100 port 54244
2020-09-20T16:15:39.553515abusebot-2.cloudsearch.cf sshd[25712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.138.100
2020-09-20T16:15:39.542857abusebot-2.cloudsearch.cf sshd[25712]: Invalid user user from 61.155.138.100 port 54244
2020-09-20T16:15:41.845855abusebot-2.cloudsearch.cf sshd[25712]: Failed password for invalid user user from 61.155.138.100 port 54244 ssh2
2020-09-20T16:24:29.439693abusebot-2.cloudsearch.cf sshd[25720]: Invalid user www from 61.155.138.100 port 37872
2020-09-20T16:24:29.448393abusebot-2.cloudsearch.cf sshd[25720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.138.100
2020-09-20T16:24:29.439693abusebot-2.cloudsearch.cf sshd[25720]: Invalid user www from 61.155.138.100 port 37872
2020-09-20T16:24:31.168233abusebot-2.cloudsearch.cf sshd[25720]: Failed
...
 2020-09-21 01:33:30
190.210.62.45 attackspambots 
190.210.62.45 (AR/Argentina/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 04:32:11 server2 sshd[9174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.62.45  user=root
Sep 20 04:32:13 server2 sshd[9174]: Failed password for root from 190.210.62.45 port 51730 ssh2
Sep 20 04:35:00 server2 sshd[10909]: Failed password for root from 198.100.146.67 port 38201 ssh2
Sep 20 04:33:30 server2 sshd[9285]: Failed password for root from 65.49.204.184 port 34610 ssh2
Sep 20 04:33:06 server2 sshd[10173]: Failed password for root from 125.227.141.116 port 54782 ssh2

IP Addresses Blocked:
 2020-09-21 01:28:38
61.177.172.128 attack 
Sep 20 19:35:54 host sshd[4663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Sep 20 19:35:56 host sshd[4663]: Failed password for root from 61.177.172.128 port 58271 ssh2
...
 2020-09-21 01:36:50
92.53.90.84 attack 
RDP Bruteforce
 2020-09-21 01:12:47
222.186.175.212 attackspam 
Sep 20 16:59:09 rush sshd[7951]: Failed password for root from 222.186.175.212 port 2972 ssh2
Sep 20 16:59:12 rush sshd[7951]: Failed password for root from 222.186.175.212 port 2972 ssh2
Sep 20 16:59:15 rush sshd[7951]: Failed password for root from 222.186.175.212 port 2972 ssh2
Sep 20 16:59:18 rush sshd[7951]: Failed password for root from 222.186.175.212 port 2972 ssh2
...
 2020-09-21 01:16:48
106.13.190.51 attack 
SSH invalid-user multiple login try
 2020-09-21 01:11:58
51.210.40.154 attackbots 
2020-09-20T17:28:38.542941afi-git.jinr.ru sshd[19330]: Failed password for admin from 51.210.40.154 port 48692 ssh2
2020-09-20T17:28:38.992388afi-git.jinr.ru sshd[19334]: Invalid user user from 51.210.40.154 port 51566
2020-09-20T17:28:38.995720afi-git.jinr.ru sshd[19334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-57ea35e0.vps.ovh.net
2020-09-20T17:28:38.992388afi-git.jinr.ru sshd[19334]: Invalid user user from 51.210.40.154 port 51566
2020-09-20T17:28:41.128631afi-git.jinr.ru sshd[19334]: Failed password for invalid user user from 51.210.40.154 port 51566 ssh2
...
 2020-09-21 01:37:06
70.81.18.133 attackbotsspam 
 TCP (SYN) 70.81.18.133:36154 -> port 23, len 44
 2020-09-21 01:01:28
77.121.92.243 attackspambots 
RDP Bruteforce
 2020-09-21 01:13:03
54.144.53.3 attack 
Invalid user testing from 54.144.53.3 port 46228
 2020-09-21 01:23:54
213.108.134.156 attackspambots 
Unauthorized connection attempt from IP address 213.108.134.156 on port 587
 2020-09-21 01:10:18
138.68.148.177 attackspambots 
2020-09-20 11:26:01.404448-0500  localhost sshd[50098]: Failed password for root from 138.68.148.177 port 36968 ssh2
 2020-09-21 01:07:52
51.254.37.192 attackbotsspam 
Sep 20 12:54:35 ny01 sshd[14738]: Failed password for root from 51.254.37.192 port 47992 ssh2
Sep 20 12:56:15 ny01 sshd[15347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192
Sep 20 12:56:17 ny01 sshd[15347]: Failed password for invalid user admin4 from 51.254.37.192 port 46950 ssh2
 2020-09-21 00:57:53
161.35.151.246 attackspam 
Sep 19 21:43:41 v26 sshd[18351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.151.246  user=r.r
Sep 19 21:43:43 v26 sshd[18351]: Failed password for r.r from 161.35.151.246 port 47432 ssh2
Sep 19 21:43:43 v26 sshd[18351]: Received disconnect from 161.35.151.246 port 47432:11: Bye Bye [preauth]
Sep 19 21:43:43 v26 sshd[18351]: Disconnected from 161.35.151.246 port 47432 [preauth]
Sep 19 21:52:31 v26 sshd[19868]: Invalid user postgres from 161.35.151.246 port 35070
Sep 19 21:52:31 v26 sshd[19868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.151.246
Sep 19 21:52:33 v26 sshd[19868]: Failed password for invalid user postgres from 161.35.151.246 port 35070 ssh2
Sep 19 21:52:33 v26 sshd[19868]: Received disconnect from 161.35.151.246 port 35070:11: Bye Bye [preauth]
Sep 19 21:52:33 v26 sshd[19868]: Disconnected from 161.35.151.246 port 35070 [preauth]


........
-----------------------------------------------
https:/
 2020-09-21 01:07:20
128.199.212.15 attack 
Sep 20 16:01:33 XXXXXX sshd[5595]: Invalid user qwerty from 128.199.212.15 port 54188
 2020-09-21 01:26:31

Recently Reported IPs

111.31.200.204 151.101.128.48 111.30.169.98 151.101.128.156
5.34.177.134 38.45.214.127 45.148.120.187 23.225.121.221
88.18.247.13 46.96.65.254 74.1.47.161 203.239.46.61
103.92.25.187 165.154.12.9 205.220.129.242 45.130.83.13
20.88.157.186 153.146.3.62 199.26.100.132 43.133.133.33