AbuseIPDB » 113.199.241.224
113.199.241.224
This IP was reported 6 times. Confidence of
Abuse
is 16% : ?
ISP
Nepal Telecommunications Corporation
Usage Type
Fixed Line ISP
ASN
AS23752
Domain Name
ntc.net.np
Country
π³π΅
Nepal
City
Kathmandu, Bagmati Province
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 113.199.241.224 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
113.199.241.224 was first reported on
March 17th 2026 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΉπ·
Threat.live
2026-07-10 10:50:04
(1 hour ago)
Suspicious Connection Attempts
Brute-Force
π¦π©
bakunin1848
2026-07-10 09:01:04
(2 hours ago)
Firewall IPS Detection on 10-07-2026 at 11:01:04
Port Scan
Exploited Host
π©πͺ
Hazzard
2026-04-13 05:38:08
(2 months ago)
(wordpress) Failed wordpress login from 113.199.241.224 (NP/Nepal/Lumbini Province/ButwΔl/-/[redacte ...
show more
(wordpress) Failed wordpress login from 113.199.241.224 (NP/Nepal/Lumbini Province/ButwΔl/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
2026-03-17 12:04:00
(3 months ago)
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-17 09:37:33
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 113.199.241.224 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 113.199.241.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 05:37:30.628113 2026] [security2:error] [pid 32456:tid 32456] [client 113.199.241.224:59159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emailaegis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emailaegis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abkg2kodTRJ2aHMt-dJhJwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-17 07:20:22
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 113.199.241.224 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 113.199.241.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 03:20:17.517681 2026] [security2:error] [pid 15690:tid 15690] [client 113.199.241.224:53074] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||splashstation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "splashstation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abkAsQN-3m0zKXfHLYy08AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: