JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.66.180.68

202.66.180.68 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 73%: ?

73%

ISP	Prizma Solutions (Private) Limited
Usage Type	Fixed Line ISP
ASN	AS139043
Domain Name	prizmasolutions.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.66.180.68

Whois 202.66.180.68

IP Abuse Reports for 202.66.180.68:

This IP address has been reported a total of 29 times from 18 distinct sources. 202.66.180.68 was first reported on March 16th 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-27 08:40:17 (35 minutes ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:40:12.050891 2026] [security2:error] [pid 581776:tid 581776] [client 202.66.180.68:52621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|eileensharaga.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "amcZbNAZaoJMKWnDe-2UXQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-27 05:55:14 (3 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇪🇸 alferez	2026-07-27 01:34:58 (7 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 18:38:06 (14 hours ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 14:38:01.601933 2026] [security2:error] [pid 3180933:tid 3180933] [client 202.66.180.68:52759] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|doctoredwinalvarez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "doctoredwinalvarez.com"] [uri "/xmlrpc.php"] [unique_id "amZUCbvtu0ETxI43MtFd6QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-07-26 17:04:03 (16 hours ago)	202.66.180.68 - - [26/Jul/2026:19:03:32 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4379 "-" "Jetpack by ... show more 202.66.180.68 - - [26/Jul/2026:19:03:32 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4379 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 202.66.180.68 - - [26/Jul/2026:19:03:45 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4377 "-" "Jetpack by WordPress.com" 202.66.180.68 - - [26/Jul/2026:19:04:02 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4379 "-" "WordPress.com; https://wordpress.com" show less	Web App Attack Hacking
🇳🇱 maxxsense	2026-07-26 13:38:56 (19 hours ago)	(PERMBLOCK) 202.66.180.68 (PK/Pakistan/-) has had more than 4 temp blocks	Hacking
🇳🇱 maxxsense	2026-07-26 13:23:36 (19 hours ago)	(wordpress) Failed wordpress login from 202.66.180.68 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-26 09:40:15 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 05:40:09.549773 2026] [security2:error] [pid 3989508:tid 3989508] [client 202.66.180.68:52197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|sizefinder.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sizefinder.com"] [uri "/xmlrpc.php"] [unique_id "amXV-RiFSUuSrmso1_YyEAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-07-25 17:30:31 (1 day ago)	(wordpress) Failed wordpress login from 202.66.180.68 (PK/Pakistan/-)	Brute-Force
Anonymous	2026-07-25 10:06:04 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:53:37 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:53:31.574136 2026] [security2:error] [pid 2775812:tid 2775812] [client 202.66.180.68:52099] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|lajoze.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lajoze.com"] [uri "/xmlrpc.php"] [unique_id "amSHmydLLWxE3JBdOMEvRgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 IloGus	2026-07-25 08:30:41 (2 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 06:51:05 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:50:58.591726 2026] [security2:error] [pid 4019203:tid 4019203] [client 202.66.180.68:52879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|f40ph.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "f40ph.org"] [uri "/xmlrpc.php"] [unique_id "amRc0q76oCRJ5k9LoUNTEwAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:13:04 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 202.66.180.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:12:58.044480 2026] [security2:error] [pid 31529:tid 31529] [client 202.66.180.68:52265] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.66.180.68 (+1 hits since last alert)\|michelehoop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michelehoop.com"] [uri "/xmlrpc.php"] [unique_id "amM6qlEyEJ54bwz28Uh-uQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-24 09:17:14 (2 days ago)	202.66.180.68 - - [24/Jul/2026:05:15:38 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.c ... show more 202.66.180.68 - - [24/Jul/2026:05:15:38 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.com; https://wordpress.com" 202.66.180.68 - - [24/Jul/2026:05:15:48 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.com; https://wordpress.com" 202.66.180.68 - - [24/Jul/2026:05:16:10 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.com; https://wordpress.com" 202.66.180.68 - - [24/Jul/2026:05:17:03 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.com; https://wordpress.com" 202.66.180.68 - - [24/Jul/2026:05:17:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5082 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇲🇩 188.237.233.180

🇩🇪 80.158.109.51

🇧🇷 34.39.230.93

🇧🇪 34.38.20.1

🇨🇴 191.95.165.238

🇲🇽 189.206.189.150

🇸🇦 175.110.145.6

🇺🇸 162.40.203.80

🇪🇨 157.100.198.255

🇭🇰 150.5.154.160

🇺🇸 66.132.186.135

🇭🇰 46.247.61.213

🇧🇷 45.178.19.238

🇩🇪 3.122.103.36

🇧🇷 2804:2d24:2ea:6a00:32c5:99ff:fecc:e3d3

🇧🇷 177.10.119.54

🇺🇸 165.232.60.54

🇺🇸 162.217.100.196

🇰🇷 161.118.153.29