JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.66.180.33

202.66.180.33 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 73%: ?

73%

ISP	Prizma Solutions (Private) Limited
Usage Type	Fixed Line ISP
ASN	AS139043
Domain Name	prizmasolutions.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.66.180.33

Whois 202.66.180.33

IP Abuse Reports for 202.66.180.33:

This IP address has been reported a total of 19 times from 14 distinct sources. 202.66.180.33 was first reported on April 10th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-21 17:02:56 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 13:02:49.558972 2026] [security2:error] [pid 3483:tid 3483] [client 202.66.180.33:37219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.33 (+1 hits since last alert)\|rkhindustries.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rkhindustries.com"] [uri "/xmlrpc.php"] [unique_id "aoiEucfhiaW-Y4EGbgIaTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 16:31:28 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 12:31:21.806037 2026] [security2:error] [pid 11411:tid 11411] [client 202.66.180.33:37004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.33 (+1 hits since last alert)\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sharawi-gum.com"] [uri "/xmlrpc.php"] [unique_id "aoh9WVhFspMnuX0Obytb3QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 14:58:35 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 10:58:31.855813 2026] [security2:error] [pid 3068:tid 3068] [client 202.66.180.33:37677] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.33 (+1 hits since last alert)\|modmove.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "modmove.com"] [uri "/xmlrpc.php"] [unique_id "aohnl-ov3zw1AngR465oiAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-21 13:56:17 (13 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-08-21 13:24:50 (13 hours ago)	(wordpress) Failed wordpress login from 202.66.180.33 (PK/Pakistan/-)	Brute-Force
🇺🇸 IndigoRidge	2026-08-21 12:50:23 (14 hours ago)	202.66.180.33 - - [21/Aug/2026:08:48:41 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.c ... show more 202.66.180.33 - - [21/Aug/2026:08:48:41 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 202.66.180.33 - - [21/Aug/2026:08:49:42 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 202.66.180.33 - - [21/Aug/2026:08:49:55 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 202.66.180.33 - - [21/Aug/2026:08:50:08 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 202.66.180.33 - - [21/Aug/2026:08:50:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-08-21 12:17:15 (14 hours ago)	Aug 21 14:17:03 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1921661]: Authentication failure for ... show more Aug 21 14:17:03 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1921661]: Authentication failure for marbre! from 202.66.180.33 Aug 21 14:17:14 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[1920985]: Authentication failure for marbre! from 202.66.180.33 ... show less	Web Spam
🇫🇷 dynamix	2026-08-21 11:45:46 (15 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-08-21 05:20:30 (21 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-21 05:05:49 (22 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-08-21 03:09:46 (23 hours ago)	(wordpress) Failed wordpress login from 202.66.180.33 (PK/Pakistan/-)	Brute-Force
🇺🇸 kosada.com	2026-08-20 02:03:33 (2 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇵🇱 bmino.pl	2026-07-31 15:11:45 (3 weeks ago)	Autoban IP(2): 202.66.180.33 - Hostname: WellNetworks (Private) Limited - City: Lahore - Region: Pun ... show more Autoban IP(2): 202.66.180.33 - Hostname: WellNetworks (Private) Limited - City: Lahore - Region: Punjab - Country: Pakistan - Location: 31.558,74.3587 - Organization: PRIZMA SOLUTIONS (PRIVATE) LIMITED - failed attempts. show less	Web App Attack
🇨🇦 polycoda	2026-07-30 15:31:16 (3 weeks ago)	AutoBlock: 📡 Port 22 Scan (Non Decay-Based) - 📡 Port Scan (Non Decay-Based)	Port Scan Bad Web Bot SSH
Anonymous	2026-07-29 07:00:00 (3 weeks ago)	Apache probe; attempts=23; exact paths: /xmlrpc.php	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.246.215.103

🇺🇸 147.185.132.101

🇩🇪 138.246.253.24

🇺🇸 137.184.130.35

🇷🇴 2.57.122.150

🇧🇷 200.50.146.201

🇺🇸 195.184.76.119

🇦🇷 190.172.122.143

🇧🇷 168.205.101.0

🇨🇳 153.3.126.200

🇦🇷 143.105.97.247

🇩🇪 141.22.28.227

🇨🇳 112.94.5.43

🇺🇸 104.152.52.142

🇮🇱 84.95.98.16

🇻🇳 27.79.6.189

🇨🇳 14.17.59.195

🇬🇧 2.103.68.218

🇮🇳 200.141.2.87

🇺🇸 147.185.132.198