Identicon of IP address 111.119.37.29

111.119.37.29

IP Risk Score: 82 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 111.119.37.29
Country: Nepal flag Nepal (NP)
Region Name: Koshi (P1)
City: Ilām
ISP: Websurfer Nepal Communication System Pvt. Ltd
Organization: Websurfer Nepal Communication System Pvt. Ltd
Threat level: 82 / 100
Conf. level: 100 / 100
Properties
ASN: AS24550
AS Name: Websurfer Nepal Internet Service Provider
Timezone: Asia/Kathmandu
Status: Critical

Observed Client Profile
  • OS: Android (100%)
  • Device Type: Mobile (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of automated behavior with a botnet detection flag and lacks JavaScript support. The user-agent appears to be a mobile device but may be spoofed. The absence of RDNS and the nature of the access raise concerns about potential malicious intent.

The supernet (111.119.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs showing repetitive, low-interaction visits to the same pages, suggesting potential automated scraping activity. The use of similar user agents across these IPs, combined with DNS mismatches, raises concerns about the legitimacy of the traffic, indicating possible misuse of hosting infrastructure.

🕸️
Botnet Node
JavaScript Support
⚠️ No
User-Agent Samples
  • Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.7449.1076 Mobile Safari/537.36

IP Location

Region: Koshi, Nepal

City: Ilām

Local time: 2026-06-23 20:44:57