AbuseIPDB » 111.119.248.40
111.119.248.40
This IP was reported 7 times. Confidence of
Abuse
is 11% : ?
ISP
Huawei-Cloud-SG
Usage Type
Data Center/Web Hosting/Transit
ASN
AS136907
Hostname(s)
ecs-111-119-248-40.compute.hwclouds-dns.com
Domain Name
huawei.com
Country
🇸🇬
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 111.119.248.40 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
111.119.248.40 was first reported on
April 20th 2021 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Sklurk
2026-06-27 17:18:53
(3 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-26 17:07:42
(4 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-25 16:47:37
(5 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 11:13:49
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 111.119.248.40 (ecs-111-119-248-40.compute.hwcl ...
show more
(mod_security) mod_security (id:210730) triggered by 111.119.248.40 (ecs-111-119-248-40.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 07:13:42.744741 2026] [security2:error] [pid 18451:tid 18451] [client 111.119.248.40:42408] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "afxz5pCF_fxmJRS2GvhLQwAAAAw"], referer: http://civilwarzone.com/ChronologyIndex.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-05-03 06:49:13
(1 month ago)
Web App Attack
Web App Attack
🇩🇪
g33k.biz
2021-04-20 08:52:00
(5 years ago)
Apr 20 14:50:34 v22019038103785759 sshd\[20091\]: Invalid user admin from 111.119.248.40 port 40680
...
show more
Apr 20 14:50:34 v22019038103785759 sshd\[20091\]: Invalid user admin from 111.119.248.40 port 40680
Apr 20 14:50:34 v22019038103785759 sshd\[20091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.119.248.40
Apr 20 14:50:35 v22019038103785759 sshd\[20091\]: Failed password for invalid user admin from 111.119.248.40 port 40680 ssh2
Apr 20 14:51:59 v22019038103785759 sshd\[20318\]: Invalid user admin from 111.119.248.40 port 43350
Apr 20 14:51:59 v22019038103785759 sshd\[20318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.119.248.40
...
show less
Brute-Force
SSH
🇩🇪
emha.koeln
2021-04-20 07:06:55
(5 years ago)
Apr 20 13:06:17 v2202006123119120432 sshd[29937]: pam_unix(sshd:auth): authentication failure; logna ...
show more
Apr 20 13:06:17 v2202006123119120432 sshd[29937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.119.248.40
Apr 20 13:06:19 v2202006123119120432 sshd[29937]: Failed password for invalid user admin from 111.119.248.40 port 36129 ssh2
Apr 20 13:06:54 v2202006123119120432 sshd[29942]: Invalid user admin from 111.119.248.40 port 40259
show less
Brute-Force
SSH
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: