JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.119.34.190

111.119.34.190 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 33%: ?

33%

ISP	Websurfer Nepal Communication System Pvt. Ltd
Usage Type	Fixed Line ISP
ASN	AS24550
Domain Name	websurfer.com.np
Country	🇳🇵 Nepal
City	Kusma, Gandaki Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.119.34.190

Whois 111.119.34.190

IP Abuse Reports for 111.119.34.190:

This IP address has been reported a total of 15 times from 13 distinct sources. 111.119.34.190 was first reported on January 17th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Hmorrin	2026-07-15 10:15:36 (9 hours ago)		Port Scan
🇺🇸 stechusa	2026-07-13 04:09:12 (2 days ago)	ELEVATED_THREAT \| 434 IPs targeting /brand.html \| URL template shared by 178 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 434 IPs targeting /brand.html \| URL template shared by 178 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.91, unique_ips=640) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-07-04 13:05:23 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-03 00:57:14 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-26 23:52:26 (2 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /communications/videoconference.html?___SID=94b513bebb09aa466293e9ce35d33a8dU&dir=desc&mode=grid&order=order_view&stock=1 \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
🇳🇱 maxxsense	2026-03-10 08:05:24 (4 months ago)	111.119.34.190 (NP/Nepal/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
🇧🇷 hostseries	2026-03-10 03:06:41 (4 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 matt	2026-03-04 03:18:26 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-10 00:30:23 (5 months ago)	(mod_security) mod_security (id:210381) triggered by 111.119.34.190 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210381) triggered by 111.119.34.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:30:17.560965 2026] [security2:error] [pid 14366:tid 14366] [client 111.119.34.190:27735] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|pobanz.com\|F\|4"] [data "REQUEST_URI=/images/christmas17/02/ntjHkakmQQikqoagpHr%7Q_thumb_2cfc.jpg"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pobanz.com"] [uri "/images/christmas17/02/ntjHkakmQQikqoagpHr%7Q_thumb_2cfc.jpg"] [unique_id "aYp8GcqJqqIqr7Ge9KYhggAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 15:12:42 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 111.119.34.190 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 111.119.34.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 10:12:27.218189 2025] [security2:error] [pid 4372:tid 4417] [client 111.119.34.190:1603] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mail.btoelsalvador.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.btoelsalvador.com"] [uri "/"] [unique_id "aU_3WwY9s37H9l3KwMcFIwAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-23 05:27:10 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-01-26 14:25:50 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 Psycho Solutions LLC	2025-01-17 10:13:28 (1 year ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 1/17/2025 10:13 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-01-17 07:17:08 (1 year ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.60

🇫🇷 185.177.72.54

🇨🇳 182.244.5.153

🇺🇸 132.148.155.138

🇸🇬 47.84.140.213

🇺🇸 195.184.76.215

🇵🇱 176.53.159.197

🇳🇱 172.71.99.212

🇧🇼 168.167.72.132

🇲🇽 160.34.212.79

🇺🇸 45.79.109.4

🇫🇷 2001:bc8:1200:3:208:a2ff:fe0c:6d1c

🇺🇸 216.25.89.98

🇮🇳 192.178.65.81

🇹🇷 176.90.112.168

🇭🇰 152.32.128.149

🇫🇮 144.31.156.249

🇨🇳 124.90.102.200

🇺🇸 34.125.204.3

🇩🇪 169.150.201.38