JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

202.66.180.10

Recent Activity

Abuse Confidence Score

12% Caution

12 reports

10 reporters · latest 4 days ago

ISP: Prizma Solutions (Private) Limited
Usage Type: Fixed Line ISP
ASN: AS139043
Domain Name: prizmasolutions.pk
Country: 🇵🇰 Pakistan
City: Lahore, Punjab

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 10 distinct reporters

First reported

October 5th 2025

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1 🇺🇸 United States of America 1

Most common categories Bad Web Bot 2 Web App Attack 1 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-24 23:30:24 (4 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/10964/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL25lYy9zaG9wYnkvcHJvamVjdG9yX2x1bWVuLTUwMDAtNDIwMC0zNTAwLTI4MDAtMjMwMC0zMTAwLmh0bWw,/form_key/Zm9p44929BktVWnS/ \| UA: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.2; Trident/4.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-29 12:25:11 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 16:04:40 (2 months ago)	DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS215599. This IP (AS139043) sent ~214 packets (0.24 MB) during the attack window. Likely a compromised device (botnet).	DDoS Attack Exploited Host
Anonymous	2026-08-03 17:13:19 (2 months ago)	denied traffic to a honeypot network. destination port 10436.	Port Scan Hacking
🇫🇷 masterguru	2026-06-19 15:01:34 (4 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-19 10:46:56 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.10 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 06:46:52.231661 2026] [security2:error] [pid 21890:tid 21890] [client 202.66.180.10:52275] M ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.10 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 06:46:52.231661 2026] [security2:error] [pid 21890:tid 21890] [client 202.66.180.10:52275] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.10 (+1 hits since last alert)\|lspfest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lspfest.com"] [uri "/xmlrpc.php"] [unique_id "ajUeHAGl16KRUvC8YthRbQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-03 12:19:37 (5 months ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.10 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 08:19:30.777710 2026] [security2:error] [pid 7798:tid 7798] [client 202.66.180.10:53114] Mod ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.10 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 08:19:30.777710 2026] [security2:error] [pid 7798:tid 7798] [client 202.66.180.10:53114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.10 (+1 hits since last alert)\|geriterry.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geriterry.com"] [uri "/xmlrpc.php"] [unique_id "afc9UgmuLvBdknAnmUz-DwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-03 08:30:57 (5 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-03-12 16:44:02 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 ipblock.com	2025-12-04 06:23:00 (10 months ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇩🇪 london2038.com	2025-11-04 06:26:15 (11 months ago)	Connection atttempts against closed TCP ports Nov 4 07:26:12 BLOCK SRC=202.66.180.10 LEN=44 TOS=0x00 PREC=0x00 TTL=116 ID=62736 PROTO=TCP SPT=51253 DPT=22 WINDOW=29200 RES=0x00 SYN Nov 4 07:26:13 BLOCK SRC=202.66.180.10 LEN=44 TOS=0x00 PREC=0x00 T ... show more Connection atttempts against closed TCP ports Nov 4 07:26:12 BLOCK SRC=202.66.180.10 LEN=44 TOS=0x00 PREC=0x00 TTL=116 ID=62736 PROTO=TCP SPT=51253 DPT=22 WINDOW=29200 RES=0x00 SYN Nov 4 07:26:13 BLOCK SRC=202.66.180.10 LEN=44 TOS=0x00 PREC=0x00 TTL=116 ID=62807 PROTO=TCP SPT=51253 DPT=23 WINDOW=29200 RES=0x00 SYN Nov 4 07:26:14 BLOCK SRC=202.66.180.10 LEN=44 TOS=0x00 PREC=0x00 TTL=116 ID=62824 PROTO=TCP SPT=51253 DPT=135 WINDOW=29200 RES=0x00 SYN show less	Port Scan
🇳🇱 exxos	2025-10-05 11:03:01 (1 year ago)	Attacks with Bad user agents	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.1.136.171

🇺🇸 162.240.154.26

🇺🇸 161.104.228.63

🇨🇳 49.72.212.22

🇺🇸 199.165.159.165

🇩🇪 172.121.255.192

🇮🇷 93.118.170.197

🇳🇱 89.255.58.44

🇵🇭 49.149.198.35

🇳🇱 45.148.10.151

🇸🇬 23.171.216.121

🇬🇧 5.102.169.102

🇨🇳 1.58.117.221

🇧🇷 189.113.8.254

🇪🇨 186.68.83.104

🇩🇪 167.94.146.59

🇬🇧 165.154.174.206

🇯🇵 132.145.112.250

🇨🇳 121.40.217.100

🇨🇳 111.22.163.209