JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.123.79.56

223.123.79.56 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 41%: ?

41%

ISP	CMPak Limited
Usage Type	Fixed Line ISP
ASN	AS138423
Domain Name	zong.com.pk
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.123.79.56

Whois 223.123.79.56

IP Abuse Reports for 223.123.79.56:

This IP address has been reported a total of 22 times from 20 distinct sources. 223.123.79.56 was first reported on February 23rd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 roboware	2026-06-07 13:29:15 (1 week ago)	IP address identified by DMARC report	Email Spam Spoofing
🇳🇱 soverin	2026-06-05 15:06:38 (1 week ago)	spam	Email Spam
🇪🇸 librebit	2026-05-31 02:48:33 (2 weeks ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇳🇱 soverin	2026-05-25 11:51:09 (3 weeks ago)	spam	Email Spam
🇩🇪 ksol-hostmaster	2026-05-23 11:08:00 (3 weeks ago)	May 23 13:07:59 ksol postfix/postscreen[16543]: PREGREET 22 after 0.15 from [223.123.79.56]:55638: E ... show more May 23 13:07:59 ksol postfix/postscreen[16543]: PREGREET 22 after 0.15 from [223.123.79.56]:55638: EHLO [223.123.79.59]\r\n May 23 13:08:00 ksol postfix/postscreen[16543]: NOQUEUE: reject: RCPT from [223.123.79.56]:55638: 550 5.7.1 Service unavailable; client [223.123.79.56] blocked using rep.mailspike.net; from=<anonymized@email>, to=<anonymized@email>, proto=ESMTP, helo=<[223.123.79.59]> ... show less	Email Spam
🇭🇺 Lacika555	2026-05-21 15:06:48 (3 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2026-05-20 03:16:27 (4 weeks ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇨🇿 interconnect.cz	2026-05-19 15:46:11 (4 weeks ago)	[19/May/2026 17:46:11] IP address 223.123.79.56 found in DNS blacklist SpamCop, mail from <velty@int ... show more [19/May/2026 17:46:11] IP address 223.123.79.56 found in DNS blacklist SpamCop, mail from <[email protected]> to <[email protected]> [19/May/2026 17:46:11] IP address 223.123.79.56 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [19/May/2026 17:46:11] IP address 223.123.79.56 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> ... show less	Brute-Force Email Spam
🇫🇮 notelseit	2026-05-18 08:57:38 (4 weeks ago)	2026-05-18T10:56:41.772184+02:00 mail postfix/smtpd[1362491]: NOQUEUE: reject: RCPT from unknown[223 ... show more 2026-05-18T10:56:41.772184+02:00 mail postfix/smtpd[1362491]: NOQUEUE: reject: RCPT from unknown[223.123.79.56]: 450 4.7.25 Client host rejected: cannot find your hostname, [223.123.79.56]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[223.123.79.59]> 2026-05-18T10:56:41.949337+02:00 mail postfix/smtpd[1362491]: lost connection after RCPT from unknown[223.123.79.56] 2026-05-18T10:57:37.182488+02:00 mail postfix/smtpd[1365633]: NOQUEUE: reject: RCPT from unknown[223.123.79.56]: 450 4.7.25 Client host rejected: cannot find your hostname, [223.123.79.56]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[223.123.79.59]> ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-05-17 13:31:44 (1 month ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇺🇸 TPI-Abuse	2026-05-05 12:49:46 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 223.123.79.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 223.123.79.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 08:49:41.894925 2026] [security2:error] [pid 13363:tid 13363] [client 223.123.79.56:56686] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.lertap5.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lertap5.com"] [uri "/Documentation/Samples/MondatY/mondaty.dat"] [unique_id "afnnZWjQbtAFh1ykTBzsdwAAAAw"], referer: https://www.lertap5.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 vestibtech	2026-04-25 17:29:03 (1 month ago)	2026-04-25T11:29:02.346585-06:00 Host-KLAX-C dovecot[1186]: imap-login: Disconnected: Connection clo ... show more 2026-04-25T11:29:02.346585-06:00 Host-KLAX-C dovecot[1186]: imap-login: Disconnected: Connection closed (auth failed, 2 attempts in 10 secs): user=<[email protected]>, method=PLAIN, rip=223.123.79.56, lip=185.198.26.44, TLS: Connection closed, session=<S20cN0xQwtPfe084> ... show less	Brute-Force
🇫🇷 bigorre.org	2026-04-24 09:50:17 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-04-23 17:35:53 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇷🇸 Smel	2026-04-20 07:50:55 (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 138.99.38.234

🇸🇬 136.110.63.185

🇺🇸 64.62.197.91

🇺🇸 54.225.199.17

🇳🇱 45.148.10.152

🇬🇧 35.203.210.80

🇬🇧 35.203.210.67

🇵🇱 195.82.166.20

🇷🇺 194.106.196.45

🇳🇱 176.65.139.85

🇱🇰 123.231.95.246

🇰🇭 117.20.117.111

🇦🇺 116.91.223.122

🇮🇳 106.76.175.4

🇮🇳 103.49.167.183

🇩🇪 87.106.70.198

🇳🇱 81.19.216.109

🇺🇸 64.227.110.161

🇳🇱 20.76.151.237

🇰🇷 211.62.96.42