AbuseIPDB » 116.212.147.63

116.212.147.63 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 69%: ?

69%

ISP	MekongNet, Internet Service Provider (ISP), Internet Exchange Provider (IXP) and Internet Data Exchange Center (IDX)
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 116.212.147.63

Whois 116.212.147.63

IP Abuse Reports for 116.212.147.63:

This IP address has been reported a total of 59 times from 13 distinct sources. 116.212.147.63 was first reported on December 2nd 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
syokadmin	2025-01-15 12:00:47 (19 hours ago)	(cpanel) Failed cPanel login from 116.212.147.63 (KH/Cambodia/-): 1 in the last 3600 secs	Brute-Force Web App Attack
TPI-Abuse	2025-01-14 06:12:12 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 01:12:04.302580 2025] [security2:error] [pid 240203:tid 240203] [client 116.212.147.63:27160] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "achillespress.com"] [uri "/.env.bak"] [unique_id "Z4YANJCYXwbWkhyNvOD8pQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2025-01-14 03:12:52 (2 days ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
TPI-Abuse	2025-01-13 13:33:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 13 08:33:33.297451 2025] [security2:error] [pid 715858:tid 715858] [client 116.212.147.63:5601] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.env.bak"] [unique_id "Z4UWLWgD6hVo9ZcINoqTggAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-13 10:24:53 (2 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2025-01-13 08:02:58 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 13 03:02:51.961837 2025] [security2:error] [pid 14091:tid 14091] [client 116.212.147.63:39217] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.riedmannfamily.com"] [uri "/.env"] [unique_id "Z4TIq6k7aOhFvk2D_AE-LAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-13 07:34:32 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 13 02:34:24.784876 2025] [security2:error] [pid 960359:tid 960359] [client 116.212.147.63:59394] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.env.bak"] [unique_id "Z4TCAFoN3HLSBlgsnyW2twAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-13 06:01:45 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 13 01:01:38.859154 2025] [security2:error] [pid 1661743:tid 1661743] [client 116.212.147.63:39214] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3rddprints.com"] [uri "/.env.bak"] [unique_id "Z4SsQi7mcp9WoyEwPs4ufgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-13 04:06:22 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 23:06:18.943350 2025] [security2:error] [pid 1894615:tid 1894615] [client 116.212.147.63:33426] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "36hoursonly.com"] [uri "/.env.bak"] [unique_id "Z4SROoxeUo-cxdLJn_zbOAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-13 03:44:36 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 22:44:31.830595 2025] [security2:error] [pid 2769901:tid 2769928] [client 116.212.147.63:53417] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "360degreevalue.com"] [uri "/.env.bak"] [unique_id "Z4SMH9hgphKR_gzegg0qHwAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-13 00:42:09 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 19:42:01.374713 2025] [security2:error] [pid 579140:tid 579140] [client 116.212.147.63:27457] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "247.fishing"] [uri "/.env.bak"] [unique_id "Z4RhWQRse15IjcUUqIT6HAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-12 19:46:49 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 14:46:46.585217 2025] [security2:error] [pid 12818:tid 12834] [client 116.212.147.63:52655] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "15thfar.org"] [uri "/.env.bak"] [unique_id "Z4QcJq-rdiSi5xLloHXKLgAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-01-12 18:52:55 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 13:52:50.050016 2025] [security2:error] [pid 3494993:tid 3494993] [client 116.212.147.63:25258] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "123clearmyticket.com"] [uri "/.env.bak"] [unique_id "Z4QPgv2lgD-Z-CLwr9QDrAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
rtbh.com.tr	2025-01-11 20:50:54 (4 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
TPI-Abuse	2025-01-11 02:50:21 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 116.212.147.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 10 21:50:16.405254 2025] [security2:error] [pid 26810:tid 26810] [client 116.212.147.63:16837] [client 116.212.147.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "representacionesthompson.com"] [uri "/.env"] [unique_id "Z4HcaIFDCYo-mIJRmUmz-wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack