JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.223.179.49

111.223.179.49 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 29%: ?

29%

ISP	Dialog Axiata PLC.
Usage Type	Fixed Line ISP
ASN	AS18001
Domain Name	dialog.lk
Country	🇱🇰 Sri Lanka
City	Colombo, Western Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.223.179.49

Whois 111.223.179.49

IP Abuse Reports for 111.223.179.49:

This IP address has been reported a total of 12 times from 10 distinct sources. 111.223.179.49 was first reported on April 12th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-06-25 07:38:15 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-06-25 06:59:35 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 abdubhai	2026-06-25 06:35:06 (2 days ago)	111.223.179.49 - - [25/Jun/2026: ...	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 06:02:22 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 111.223.179.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 111.223.179.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 02:02:18.447999 2026] [security2:error] [pid 9958:tid 9958] [client 111.223.179.49:46537] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.223.179.49 (+1 hits since last alert)\|gacstoday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gacstoday.com"] [uri "/xmlrpc.php"] [unique_id "ajzEaiZXrlfskptVWb8B0wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 05:27:13 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 111.223.179.49 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 111.223.179.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 01:27:05.382871 2026] [security2:error] [pid 10276:tid 10276] [client 111.223.179.49:47920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.223.179.49 (+1 hits since last alert)\|kiinlog.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kiinlog.com"] [uri "/xmlrpc.php"] [unique_id "ajy8KQHnPt743TuCiTXFCQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-04-21 15:19:36 (2 months ago)	Email account brute force: 2 attempts were recorded from 111.223.179.49 2026-04-21T17:02:28+02:00 wa ... show more Email account brute force: 2 attempts were recorded from 111.223.179.49 2026-04-21T17:02:28+02:00 warning: unknown[111.223.179.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-21T17:02:29+02:00 warning: unknown[111.223.179.49]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇫🇮 notelseit	2026-04-17 05:07:13 (2 months ago)	2026-04-17T07:07:06.426676+02:00 mail postfix/smtps/smtpd[544899]: warning: unknown[111.223.179.49]: ... show more 2026-04-17T07:07:06.426676+02:00 mail postfix/smtps/smtpd[544899]: warning: unknown[111.223.179.49]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-04-17T07:07:13.139165+02:00 mail postfix/smtps/smtpd[544899]: warning: unknown[111.223.179.49]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-04-17T07:07:13.467366+02:00 mail postfix/smtps/smtpd[544899]: disconnect from unknown[111.223.179.49] ehlo=1 auth=0/2 commands=1/3 ... show less	Brute-Force Email Spam
🇿🇦 maximonline.co.za	2026-04-15 06:46:08 (2 months ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇬🇧 Hobby Bob	2026-04-15 06:46:04 (2 months ago)	Apr 15 07:46:04 mail postfix/smtps/smtpd[4177418]: warning: unknown[111.223.179.49]: SASL PLAIN auth ... show more Apr 15 07:46:04 mail postfix/smtps/smtpd[4177418]: warning: unknown[111.223.179.49]: SASL PLAIN authentication failed: show less	Hacking Brute-Force
🇫🇷 dwmp	2026-04-15 06:39:03 (2 months ago)	Apr 15 08:39:02 webcore postfix/smtpd[2092602]: warning: unknown[111.223.179.49]: SASL CRAM-MD5 auth ... show more Apr 15 08:39:02 webcore postfix/smtpd[2092602]: warning: unknown[111.223.179.49]: SASL CRAM-MD5 authentication failed: authentication failure Apr 15 08:39:02 webcore postfix/smtpd[2092602]: warning: unknown[111.223.179.49]: SASL PLAIN authentication failed: authentication failure Apr 15 08:39:02 webcore postfix/smtpd[2092602]: warning: unknown[111.223.179.49]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇨🇿 lp	2026-04-12 10:50:25 (2 months ago)	Email account brute force: 2 attempts were recorded from 111.223.179.49 2026-04-12T12:06:29+02:00 wa ... show more Email account brute force: 2 attempts were recorded from 111.223.179.49 2026-04-12T12:06:29+02:00 warning: unknown[111.223.179.49]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-04-12T12:06:30+02:00 warning: unknown[111.223.179.49]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 factor1	2026-04-12 03:43:33 (2 months ago)	Fail2ban at sherman Reports Abuse.	Hacking Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.238

🇨🇦 208.96.106.191

🇸🇪 207.2.123.248

🇮🇳 180.151.244.108

🇩🇪 152.53.87.135

🇩🇪 130.12.182.143

🇮🇩 103.236.191.35

🇷🇺 95.188.91.101

🇮🇪 64.43.171.221

🇬🇪 62.212.58.122

🇸🇦 46.184.0.33

🇦🇿 31.171.58.61

🇳🇴 20.100.170.235

🇸🇻 201.247.170.159

🇸🇪 193.183.84.48

🇸🇪 185.130.246.205

🇧🇩 160.187.109.29

🇮🇳 152.58.1.182

🇺🇸 104.243.46.222

🇳🇵 103.134.218.189