JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.156.80.79

119.156.80.79 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 4%: ?

ISP	IPTV
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Pakpattan, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.156.80.79

Whois 119.156.80.79

IP Abuse Reports for 119.156.80.79:

This IP address has been reported a total of 2 times from 1 distinct source. 119.156.80.79 was first reported on July 10th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 11:26:06 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 119.156.80.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.156.80.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 07:26:01.400843 2026] [security2:error] [pid 11789:tid 11789] [client 119.156.80.79:58202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.156.80.79 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "alDWyRznMBnq_BVcMBClCwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 07:09:24 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 119.156.80.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.156.80.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 03:09:21.352265 2026] [security2:error] [pid 17409:tid 17431] [client 119.156.80.79:58149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.156.80.79 (+1 hits since last alert)\|metropaint.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "metropaint.net"] [uri "/xmlrpc.php"] [unique_id "alCaoTSdv2zCJX5pxTFzlAAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.11

🇺🇸 172.239.51.96

🇧🇬 91.92.47.128

🇳🇱 91.92.40.176

🇳🇱 64.89.162.37

🇳🇱 45.148.10.152

🇺🇸 40.121.179.100

🇫🇷 185.177.72.49

🇩🇪 167.94.146.34

🇱🇹 62.60.130.219

🇺🇸 52.167.144.216

🇲🇾 49.124.152.174

🇵🇰 39.37.66.171

🇻🇳 2402:800:61ef:cfdb:41c:c091:5293:4416

🇲🇽 206.135.11.234

🇳🇱 188.166.50.26

🇺🇸 172.253.185.16

🇺🇸 172.200.228.35

🇫🇷 91.231.89.227

🇲🇾 49.124.149.47