JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.155.23.97

119.155.23.97 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 24%: ?

24%

ISP	Pakistan Telecommunication Company Limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.155.23.97

Whois 119.155.23.97

IP Abuse Reports for 119.155.23.97:

This IP address has been reported a total of 10 times from 4 distinct sources. 119.155.23.97 was first reported on August 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-08-21 12:26:56 (1 week ago)	(wordpress) Failed wordpress login from 119.155.23.97 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-21 08:02:06 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 04:01:58.658088 2026] [security2:error] [pid 24972:tid 24972] [client 119.155.23.97:51679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|adona.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "adona.org"] [uri "/xmlrpc.php"] [unique_id "aogF9q-mQVbPUf7wbe_8qgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 07:00:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 03:00:13.504422 2026] [security2:error] [pid 32078:tid 32078] [client 119.155.23.97:54670] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|thepercussionworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thepercussionworks.com"] [uri "/xmlrpc.php"] [unique_id "aof3fdusfl3F_kBS7TNCSwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 06:29:20 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 02:29:13.939295 2026] [security2:error] [pid 15688:tid 15688] [client 119.155.23.97:53222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|writebetweenthelines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "writebetweenthelines.com"] [uri "/xmlrpc.php"] [unique_id "aofwOQUbDSbUdYRGZhj4CQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-21 06:27:09 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 05:28:53 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 01:28:48.541740 2026] [security2:error] [pid 2742:tid 2742] [client 119.155.23.97:65410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|luxandunion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "luxandunion.com"] [uri "/xmlrpc.php"] [unique_id "aofiEIalJZjTvTfLFfCqZwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 04:02:50 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 00:02:42.828518 2026] [security2:error] [pid 21504:tid 21504] [client 119.155.23.97:61202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|alsetsystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "alsetsystems.com"] [uri "/xmlrpc.php"] [unique_id "aofN4kNDjZ-KGD-p8aw-jQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 01:22:26 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 21:22:22.652670 2026] [security2:error] [pid 23869:tid 23869] [client 119.155.23.97:58923] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|415test.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "415test.com"] [uri "/xmlrpc.php"] [unique_id "aoeoTtPa5IipiELxok-6eQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 15:27:48 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.155.23.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 11:27:42.135104 2026] [security2:error] [pid 13752:tid 13752] [client 119.155.23.97:54947] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.155.23.97 (+1 hits since last alert)\|milliondollarbelt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "milliondollarbelt.com"] [uri "/xmlrpc.php"] [unique_id "aocc7jAQhhGNBAGK-ur1cgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 IndoAbuse	2026-08-20 13:13:30 (1 week ago)	Fail2Ban [wordfence] - Malicious web scan and exploit attempt blocked by Wordfence	Port Scan Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.203

🇸🇪 81.233.184.161

🇩🇪 213.209.159.223

🇭🇰 199.45.154.177

🇺🇸 195.184.76.191

🇵🇭 161.49.89.39

🇺🇸 150.136.214.177

🇰🇷 121.134.90.172

🇫🇷 86.210.212.148

🇨🇦 20.220.211.172

🇨🇦 20.48.179.39

🇺🇸 2607:f8b0:4023:1000::121

🇺🇸 2607:f8b0:400c:c00::122

🇺🇦 176.120.110.87

🇺🇸 162.243.116.182

🇮🇩 103.147.159.198

🇺🇸 66.132.186.164

🇺🇸 172.190.117.245

🇪🇸 81.172.79.168

🇩🇪 69.5.169.232