JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.123.125.58

223.123.125.58 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 99%: ?

99%

ISP	CMPak Limited
Usage Type	Fixed Line ISP
ASN	AS138423
Domain Name	zong.com.pk
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.123.125.58

Whois 223.123.125.58

IP Abuse Reports for 223.123.125.58:

This IP address has been reported a total of 66 times from 30 distinct sources. 223.123.125.58 was first reported on April 4th 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-27 10:51:34 (9 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇫🇮 bittiguru.fi	2026-07-27 07:47:45 (12 hours ago)	223.123.125.58 - [27/Jul/2026:10:47:39 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com ... show more 223.123.125.58 - [27/Jul/2026:10:47:39 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; https://wordpress.com" "-" 223.123.125.58 - [27/Jul/2026:10:47:45 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; https://wordpress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-27 07:32:27 (12 hours ago)	223.123.125.58 - [27/Jul/2026:10:32:17 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by Wo ... show more 223.123.125.58 - [27/Jul/2026:10:32:17 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by WordPress.com" "-" 223.123.125.58 - [27/Jul/2026:10:32:27 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/13.0; WordPress/6.2; http://site89589917.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-27 07:04:01 (12 hours ago)	223.123.125.58 - [27/Jul/2026:10:03:54 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/12.1; ... show more 223.123.125.58 - [27/Jul/2026:10:03:54 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/12.1; WordPress/6.1; http://site72973896.com" "-" 223.123.125.58 - [27/Jul/2026:10:04:00 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/13.0; WordPress/6.2; http://site91681425.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 Marc	2026-07-26 13:52:34 (1 day ago)	223.123.125.58 - - [26/Jul/2026:15:51:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4669 "-" "WordPress. ... show more 223.123.125.58 - - [26/Jul/2026:15:51:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4669 "-" "WordPress.com; https://wordpress.com" 223.123.125.58 - - [26/Jul/2026:15:51:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4671 "-" "Jetpack/12.1; WordPress/6.3; http://site13425593.com" 223.123.125.58 - - [26/Jul/2026:15:52:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4669 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 13:26:03 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:25:58.690885 2026] [security2:error] [pid 3212676:tid 3212676] [client 223.123.125.58:56030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.125.58 (+1 hits since last alert)\|futuresgrowhere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "futuresgrowhere.com"] [uri "/xmlrpc.php"] [unique_id "amYK5ld7b8iUY3s-1rcDgAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-22 13:30:40 (5 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇫🇷 dynamix	2026-07-19 17:23:00 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-19 17:07:55 (1 week ago)	(PERMBLOCK) 223.123.125.58 (PK/Pakistan/-) has had more than 4 temp blocks	Hacking
Anonymous	2026-07-19 16:46:03 (1 week ago)	(wordpress) Failed wordpress login from 223.123.125.58 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-19 09:41:32 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:41:27.281380 2026] [security2:error] [pid 7675:tid 7675] [client 223.123.125.58:58715] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.125.58 (+1 hits since last alert)\|toepferlab.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "toepferlab.org"] [uri "/xmlrpc.php"] [unique_id "alybxxWhpZqcjfrLjNg-oAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-19 03:20:09 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-19 02:59:17 (1 week ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 18:34:52 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.125.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 14:34:43.916595 2026] [security2:error] [pid 914326:tid 914326] [client 223.123.125.58:63063] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.125.58 (+1 hits since last alert)\|directcch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "directcch.com"] [uri "/xmlrpc.php"] [unique_id "alvHQ1qhhnd4JETROWL6bgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-18 17:05:46 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC CN/China/-	Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.234

🇳🇱 195.178.110.30

🇭🇺 178.164.164.33

🇺🇸 159.203.83.195

🇺🇸 147.185.132.86

🇳🇱 93.174.93.12

🇳🇱 83.83.112.125

🇩🇪 69.5.169.90

🇳🇱 46.151.178.13

🇮🇳 14.102.12.98

🇳🇱 203.55.131.3

🇦🇷 186.1.224.42

🇺🇸 172.253.223.221

🇺🇸 162.216.149.192

🇧🇷 138.118.237.5

🇿🇦 102.129.55.227

🇺🇦 91.204.122.189

🇭🇺 45.9.168.192

🇪🇨 186.70.220.137

🇳🇱 185.2.80.253