JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.119.201.239

111.119.201.239 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Huawei-Cloud-SG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Hostname(s)	ecs-111-119-201-239.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.119.201.239

Whois 111.119.201.239

IP Abuse Reports for 111.119.201.239:

This IP address has been reported a total of 21 times from 15 distinct sources. 111.119.201.239 was first reported on May 25th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-04-26 18:36:00 (4 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇱🇻 garmtech.com	2026-04-25 01:20:24 (4 months ago)	IM360 WAF: Interaction with fake plugin MV:/wp-content/plugins/easy-themes-manager/script.js	Web App Attack
🇯🇵 Short-legs-Spider	2026-04-21 11:40:04 (4 months ago)	Persistent request -- [21/Apr/2026:20:40:04 +0900] "GET /==1.htm HTTP/2.0" 403 76 "-" "Mozilla/5.0 ... show more Persistent request -- [21/Apr/2026:20:40:04 +0900] "GET /==1.htm HTTP/2.0" 403 76 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Bad Web Bot
Anonymous	2024-07-12 09:48:03 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-07-05 15:19:33 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-07-03 14:05:07 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-07-01 16:56:43 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 111.119.201.239 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 111.119.201.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 01 12:56:36.054909 2024] [security2:error] [pid 12965] [client 111.119.201.239:44700] [client 111.119.201.239] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sawted.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sawted.com"] [uri "/sawted/blog/page/3/[email protected]"] [unique_id "ZoLfxLj50gOLiooqNDGgxQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-06-28 03:14:21 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 Steve	2024-06-25 22:02:46 (2 years ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
🇦🇺 MAGIC	2024-06-22 00:05:01 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2024-06-21 08:21:35 (2 years ago)	[Fri Jun 21 15:11:01.265036 2024] [security2:error] [pid 153062:tid 129378052736576] [client 111.119 ... show more [Fri Jun 21 15:11:01.265036 2024] [security2:error] [pid 153062:tid 129378052736576] [client 111.119.201.239:46848] [client 111.119.201.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh-CN request_line = GET /index.php/layanan/nilai-survey-harapan-konsumen HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/layanan/nilai-survey-harapan-konsumen"] [unique_id "ZnU1ldOoATpKG-ebJkkmTQAAAyc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[153104] [PF/b+BHU81I] [ZnU1ldOoATpKG-ebJkkmTQAAAyc] keep_alive=[1] [2024-06-21 15:11:01.265043] [R:ZnU1ldOoATpKG-ebJkkmTQAAAyc] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-06-21 07:44:09 (2 years ago)	[Fri Jun 21 14:42:05.338848 2024] [security2:error] [pid 1017983:tid 127808168789568] [client 111.11 ... show more [Fri Jun 21 14:42:05.338848 2024] [security2:error] [pid 1017983:tid 127808168789568] [client 111.119.201.239:34954] [client 111.119.201.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: zh-CN request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555560457-suhu-maksimum-harian-di-jawa-timur-tanggal-18-oktober-2023 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555560457-suhu-maksimum-harian-di-jawa-timur-tanggal-18-oktober-2023"] [unique_id "ZnUuzcc2JkzmvIN0h5Xj3AABpgQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[101 ... show less	Hacking Web App Attack
🇫🇷 solution.it	2024-06-20 08:43:30 (2 years ago)	[Thu Jun 20 10:43:29.788028 2024] [php7:error] [pid 13394] [client 111.119.201.239:45558] script '/v ... show more [Thu Jun 20 10:43:29.788028 2024] [php7:error] [pid 13394] [client 111.119.201.239:45558] script '/var/www/html/internetriders.org/gallery/login.php' not found or unable to stat show less	Brute-Force
🇺🇸 ChamberofCommerce.com	2024-06-17 08:08:28 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2024-06-16 18:00:19 (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.16.96.250

🇩🇪 185.220.101.12

🇭🇰 118.26.37.91

🇨🇳 117.50.51.198

🇮🇩 103.121.20.18

🇧🇩 103.113.153.50

🇩🇪 69.5.169.77

🇺🇸 20.65.202.209

🇺🇸 17.166.24.40

🇺🇸 2604:a880:400:d1:0:5:2b9:8001

🇭🇰 218.189.84.73

🇧🇬 109.160.32.157

🇷🇺 77.232.165.213

🇺🇸 65.49.20.69

🇻🇪 45.195.12.212

🇭🇰 220.246.42.227

🇺🇸 216.24.219.89

🇮🇳 182.70.123.42

🇺🇸 172.71.222.162

🇨🇳 116.235.231.237