JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.123.66.150

223.123.66.150 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 77%: ?

77%

ISP	CMPak Limited
Usage Type	Fixed Line ISP
ASN	AS138423
Domain Name	zong.com.pk
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.123.66.150

Whois 223.123.66.150

IP Abuse Reports for 223.123.66.150:

This IP address has been reported a total of 21 times from 13 distinct sources. 223.123.66.150 was first reported on July 14th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 09:04:57 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:04:50.902791 2026] [security2:error] [pid 11487:tid 11487] [client 223.123.66.150:64536] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "alyTMv5Y1hxS1xYLCNndQQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 08:34:36 (7 hours ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 04:34:28.146070 2026] [security2:error] [pid 1826363:tid 1826363] [client 223.123.66.150:61172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|lightbender.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightbender.net"] [uri "/xmlrpc.php"] [unique_id "alyMFJzByPgD812BLnUeaQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-07-19 07:04:40 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (PK/Pakistan/-): 5 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (PK/Pakistan/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 11:10:51 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 07:10:44.128045 2026] [security2:error] [pid 1970928:tid 1970928] [client 223.123.66.150:64682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|lighthousescm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lighthousescm.com"] [uri "/xmlrpc.php"] [unique_id "altfNJ1XJ7BIIycFCq9O8QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-07-18 10:54:05 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 10:38:19 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:38:14.774863 2026] [security2:error] [pid 32131:tid 32131] [client 223.123.66.150:51972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|lspfest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lspfest.com"] [uri "/xmlrpc.php"] [unique_id "altXlnSwxRKpbY4gacNDgAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 08:09:57 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 04:09:53.247107 2026] [security2:error] [pid 23867:tid 23867] [client 223.123.66.150:54493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|motherlyhomecare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "motherlyhomecare.com"] [uri "/xmlrpc.php"] [unique_id "als00dAPpmeFIOPwVdynIgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-17 03:04:07 (2 days ago)	(xmlrpc) Failed xmlrpc access from 223.123.66.150 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 BlueWire Hosting	2026-07-16 12:56:23 (3 days ago)	Probing websites for vulnerabilities	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-16 07:59:13 (3 days ago)	223.123.66.150 - - [16/Jul/2026:09:58:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by ... show more 223.123.66.150 - - [16/Jul/2026:09:58:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 223.123.66.150 - - [16/Jul/2026:09:59:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.0; WordPress/6.2; http://site74247863.com" 223.123.66.150 - - [16/Jul/2026:09:59:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/13.0; WordPress/6.1; http://site81003033.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-16 07:43:46 (3 days ago)	223.123.66.150 - - [16/Jul/2026:09:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by ... show more 223.123.66.150 - - [16/Jul/2026:09:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" 223.123.66.150 - - [16/Jul/2026:09:43:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 223.123.66.150 - - [16/Jul/2026:09:43:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.1; WordPress/6.2; http://site45320049.com" show less	Hacking Web App Attack
Anonymous	2026-07-15 13:08:15 (4 days ago)	[redacted] 223.123.66.150 - - [15/Jul/2026:15:07:32 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" " ... show more [redacted] 223.123.66.150 - - [15/Jul/2026:15:07:32 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/13.0; WordPress/6.2; http://site51630044.com" [redacted] 223.123.66.150 - - [15/Jul/2026:15:07:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 223.123.66.150 - - [15/Jul/2026:15:07:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com" [redacted] 223.123.66.150 - - [15/Jul/2026:15:08:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com" [redacted] 223.123.66.150 - - [15/Jul/2026:15:08:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 12:10:04 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:09:57.067147 2026] [security2:error] [pid 686:tid 686] [client 223.123.66.150:31937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|livingawakenedbook.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "livingawakenedbook.com"] [uri "/xmlrpc.php"] [unique_id "ald4lc2UBelMWVc1VS8vPAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 11:38:48 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 223.123.66.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 07:38:42.399895 2026] [security2:error] [pid 3844:tid 3844] [client 223.123.66.150:18563] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 223.123.66.150 (+1 hits since last alert)\|mariettacaseyclub.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mariettacaseyclub.org"] [uri "/xmlrpc.php"] [unique_id "aldxQs8hScLs6V9QCht2xQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 07:35:02 (4 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samples= ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0f::12d

🇰🇷 211.46.177.174

🇦🇷 186.148.224.83

🇩🇪 152.53.148.66

🇺🇸 104.194.10.16

🇭🇰 103.30.40.129

🇳🇱 91.92.40.151

🇳🇱 45.128.199.84

🇺🇸 34.41.123.12

🇵🇰 153.117.41.201

🇨🇳 110.249.201.65

🇷🇴 80.94.92.152

🇺🇸 65.49.1.182

🇸🇬 51.79.217.46

🇳🇱 45.148.10.157

🇰🇷 118.34.164.157

🇨🇳 116.178.155.143

🇳🇬 102.88.137.80

🇱🇹 62.60.130.219

🇳🇱 45.148.10.151