AbuseIPDB » 111.119.49.99
111.119.49.99
This IP was reported 9 times. Confidence of
Abuse
is 18% : ?
ISP
CG Communications
Usage Type
Fixed Line ISP
ASN
AS141767
Domain Name
cgnet.com.np
Country
🇳🇵
Nepal
City
Biratnagar, Koshi
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 111.119.49.99 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
111.119.49.99 was first reported on
January 8th 2025 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
Vegascosmetics
2026-07-19 00:23:01
(13 hours ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
kosada.com
2026-06-29 11:55:19
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
gui-ying233
2026-06-12 00:05:35
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot
🇬🇧
Oakley
2026-05-03 05:07:42
(2 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇸🇬
mypatricks
2026-03-28 02:24:41
(3 months ago)
111.119.49.99 | Port: 12954 | DNS: 111.119.49.99 2026-03-28T10:24:40+08:00 Asia/Kathmandu | Fake HTT ...
show more
111.119.49.99 | Port: 12954 | DNS: 111.119.49.99 2026-03-28T10:24:40+08:00 Asia/Kathmandu | Fake HTTP Protocol detected! | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /superman-superhero-cake/?b85ef00aa9c5f4d50799513eb=ms-my&code=ms-my | Ref: - | Country: NP/Nepal/+05:45 IP City: Kathmandu Windows 9e332e0c2da4ede5-KTM/Kathmandu, Nepal 1 hits/0 secs Robots 3
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇧🇷
hostseries
2026-03-06 11:41:01
(4 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇷🇴
clauss
2026-02-28 20:59:18
(4 months ago)
IP reached maximum auth failures for a one day block
Brute-Force
2025-11-17 05:14:01
(8 months ago)
scanning http requests from known botnet
Web App Attack
🇩🇪
John Chrys.
2025-01-08 06:57:32
(1 year ago)
111.119.49.99 - - [08/Jan/2025:08:52:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 ...
show more
111.119.49.99 - - [08/Jan/2025:08:52:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.119.49.99 - - [08/Jan/2025:08:53:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.119.49.99 - - [08/Jan/2025:08:54:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.119.49.99 - - [08/Jan/2025:08:55:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.119.49.99 - - [08/Jan/2025:08:56:20 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
111.119.49.99 - - [08/Jan/2025:08:57:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3672 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
show less
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: