JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.235.246.228

110.235.246.228 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 0%: ?

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	ip-base-246-226.online.com.kh
Domain Name	cogetel.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.235.246.228

Whois 110.235.246.228

IP Abuse Reports for 110.235.246.228:

This IP address has been reported a total of 64 times from 28 distinct sources. 110.235.246.228 was first reported on November 1st 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-01-03 01:02:06 (5 months ago)	ICS Labs identified malicious URL in email communication from IP 110.235.246.228, Subject: 【覚悟】濁音だらけ ... show more ICS Labs identified malicious URL in email communication from IP 110.235.246.228, Subject: 【覚悟】濁音だらけの衝撃映像まとめ・裏動画・ show less	Phishing Email Spam Spoofing
🇨🇭 backslash	2025-12-28 18:18:34 (5 months ago)		Web Spam
🇮🇹 VHosting	2025-12-24 16:32:04 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 Modules	2025-12-23 19:43:00 (5 months ago)	Open proxy socks5://110.235.246.228:1080 (RT:5849ms,Loc:Cambodia,ASN:AS23673)	Open Proxy
🇺🇸 TPI-Abuse	2025-10-31 00:33:08 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 110.235.246.228 (ip-base-246-226.online.com.kh) ... show more (mod_security) mod_security (id:225170) triggered by 110.235.246.228 (ip-base-246-226.online.com.kh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 20:33:02.944093 2025] [security2:error] [pid 2289:tid 2289] [client 110.235.246.228:49798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marinestorage.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marinestorage.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQQDvo_fSIK7rX0PT6-NhgAAAAk"], referer: https://marinestorage.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-10-06 20:58:23 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 TPI-Abuse	2025-09-30 20:38:49 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 110.235.246.228 (ip-base-246-226.online.com.kh) ... show more (mod_security) mod_security (id:225170) triggered by 110.235.246.228 (ip-base-246-226.online.com.kh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 30 16:38:44.836534 2025] [security2:error] [pid 17932:tid 17932] [client 110.235.246.228:38772] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|persnicketyinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNw_1JEpQfyXI7nDxd0Y-AAAAA0"], referer: https://persnicketyinc.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 hostseries	2025-09-09 16:35:25 (9 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇺🇸 nowyouknow	2025-08-26 10:05:56 (9 months ago)	Malicious Traffic/Form Submission	Phishing Web Spam
🇳🇱 antikirra	2025-08-24 04:31:55 (9 months ago)	Proxy Port Scanning	Port Scan
🇪🇸 10dencehispahard SL	2025-08-08 07:13:07 (10 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇩🇪 rh24	2025-07-23 03:39:22 (10 months ago)	(contact-forms) Failed contact-forms trigger with match [redacted] from 110.235.246.228 (KH/Cambodia ... show more (contact-forms) Failed contact-forms trigger with match [redacted] from 110.235.246.228 (KH/Cambodia/ip-base-246-226.online.com.kh): (CF_ENABLE) show less	Hacking
🇺🇸 nowyouknow	2025-07-18 15:33:44 (11 months ago)	(From [email protected])	Phishing Web Spam
Anonymous	2025-06-27 06:06:23 (11 months ago)	Spamming registration page	Web Spam
🇺🇸 nationaleventpros.com	2025-06-15 07:38:30 (1 year ago)	WordPress login attempt	Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.135

🇬🇧 188.240.59.38

🇨🇱 186.189.112.166

🇬🇧 185.247.137.127

🇺🇸 107.150.103.9

🇵🇰 103.186.114.73

🇫🇷 91.231.89.73

🇫🇷 91.231.89.47

🇫🇷 91.231.89.43

🇳🇱 45.156.128.148

🇮🇩 36.93.249.106

🇺🇸 35.243.170.217

🇬🇧 31.14.254.102

🇵🇱 23.230.80.196

🇬🇧 5.226.140.120

🇵🇱 194.180.49.56

🇺🇸 167.172.251.117

🇵🇭 165.154.59.90

🇺🇸 162.216.150.13

🇺🇸 162.216.149.79