JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.123.124.131

223.123.124.131 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 46%: ?

46%

ISP	CMPak Limited
Usage Type	Fixed Line ISP
ASN	AS138423
Domain Name	zong.com.pk
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.123.124.131

Whois 223.123.124.131

IP Abuse Reports for 223.123.124.131:

This IP address has been reported a total of 52 times from 29 distinct sources. 223.123.124.131 was first reported on February 9th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-06 21:58:28 (16 hours ago)	[Askari] \| country=PK	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-07-05 10:41:34 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 06:41:28.508041 2026] [security2:error] [pid 29405:tid 29405] [client 223.123.124.131:61318] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.124.131 (+1 hits since last alert)\|energycapitalinvestments.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "energycapitalinvestments.com"] [uri "/xmlrpc.php"] [unique_id "ako02IMqhdqrIDplVhjpVAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 09:57:06 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 05:57:02.897087 2026] [security2:error] [pid 27788:tid 27788] [client 223.123.124.131:23141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.124.131 (+1 hits since last alert)\|mainefirst.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mainefirst.org"] [uri "/xmlrpc.php"] [unique_id "akoqbqm_sDLqAfv377tvqgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:30:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:29:56.858040 2026] [security2:error] [pid 5371:tid 5371] [client 223.123.124.131:17739] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.124.131 (+1 hits since last alert)\|freemanfoundationcle.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "freemanfoundationcle.org"] [uri "/xmlrpc.php"] [unique_id "akf_pEnIAwBHEtbJC0x4UQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 18:02:36 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:02:29.824290 2026] [security2:error] [pid 27296:tid 27296] [client 223.123.124.131:6717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.124.131 (+1 hits since last alert)\|se-advisorsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "se-advisorsgroup.com"] [uri "/xmlrpc.php"] [unique_id "akf5NSgZe1ARYNeRgj4MlgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 09:38:12 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 223.123.124.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:38:06.684576 2026] [security2:error] [pid 5649:tid 5649] [client 223.123.124.131:19933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.124.131 (+1 hits since last alert)\|fernfield.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fernfield.com"] [uri "/xmlrpc.php"] [unique_id "akTf_nbixb8yrqdTiHrgUwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 09:35:05 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 kosada.com	2026-06-29 07:10:24 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 dynamix	2026-06-28 05:23:50 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 MPL	2026-06-14 17:45:01 (3 weeks ago)	tcp/23	Port Scan
🇵🇱 genokrad	2026-06-14 15:42:38 (3 weeks ago)	Unauthorized connection attempt on TCP/23 (Telnet)	Port Scan
🇸🇬 mypatricks	2026-06-13 03:24:12 (3 weeks ago)	223.123.124.131 \| Port: 9841 \| DNS: 223.123.124.131 2026-06-13T11:24:11+08:00 Asia/Karachi \| IPs res ... show more 223.123.124.131 \| Port: 9841 \| DNS: 223.123.124.131 2026-06-13T11:24:11+08:00 Asia/Karachi \| IPs res erved list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /zh/page/2/?898aabbedecb9ffbdff=ec8a9bca9f89facbaadc \| Ref: https://xxxxxx/ \| Country: PK/Pakistan/+05:00 IP City: Islamabad macOS a0adfb17cc69e177-MRS/Marseille, France 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇳🇱 DonAtari	2026-05-15 07:29:37 (1 month ago)	DShield firewall scan - UDP to port 2770	Brute-Force SSH
🇩🇪 HandyTreff.de	2026-04-23 07:05:41 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.439 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.439 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇫🇷 Mölkky	2026-04-06 14:14:09 (3 months ago)	DDOS Attack (by infected device ?)	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.67.19.82

🇨🇦 216.26.242.67

🇺🇸 216.9.226.126

🇭🇰 199.45.155.79

🇳🇱 195.178.110.228

🇬🇧 193.8.186.31

🇬🇧 167.99.207.37

🇻🇳 160.250.133.77

🇺🇸 143.198.169.97

🇰🇷 118.39.219.45

🇨🇳 111.7.96.154

🇧🇬 79.124.62.230

🇺🇸 66.132.172.233

🇺🇸 50.188.204.213

🇺🇸 50.116.58.253

🇹🇳 41.231.85.75

🇧🇬 5.188.206.38

🇳🇱 204.76.203.206

🇨🇳 124.222.206.143

🇺🇸 100.29.192.13