JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.13.156.100

119.13.156.100 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 100%: ?

100%

ISP	VIETTEL (CAMBODIA) PTE., LTD
Usage Type	Fixed Line ISP
ASN	AS38623
Domain Name	metfone.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.13.156.100

Whois 119.13.156.100

IP Abuse Reports for 119.13.156.100:

This IP address has been reported a total of 86 times from 50 distinct sources. 119.13.156.100 was first reported on November 18th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-07-26 08:26:41 (4 hours ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇩🇪 www.Examensfragen.de	2026-07-25 23:19:25 (13 hours ago)		Web Spam Bad Web Bot
Anonymous	2026-07-24 08:57:57 (2 days ago)	http scanning for .env files ...	Hacking Web App Attack
🇵🇱 sefinek.net	2026-07-24 08:37:41 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from KH. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from KH. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ambor	2026-07-24 03:56:48 (2 days ago)	Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:7 ... show more Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:7 \| Country: KH show less	Hacking
🇧🇷 Peregrine	2026-07-24 03:09:21 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 119.13.156.100 104.22.66.4 - - [20/Jul/2026:18:00:55 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 119.13.156.100 104.22.66.4 - - [20/Jul/2026:18:00:55 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇮🇩 origrata	2026-07-23 13:13:17 (3 days ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (Laravel Reaver ... show more [OGWAF] path_traversal attack blocked \| severity: high \| GET /.env \| UA: Mozilla/5.0 (Laravel Reaver .env Presence) show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 11:46:58 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.100 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:46:50.768140 2026] [security2:error] [pid 2193841:tid 2193841] [client 119.13.156.100:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "amH_Kqz9QjtNwIx5aerUjgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-23 11:28:27 (3 days ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 119.13.156.100 - - [16/Jul/2026:19:55:38 +0300] " ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 119.13.156.100 - - [16/Jul/2026:19:55:38 +0300] "GET /.env HTTP/1.1" 403 6298 "http://heraklion-bridge.gr/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
🇺🇸 ArturShelby	2026-07-23 10:44:06 (3 days ago)	Critical file access: /.env	Web App Attack
🇺🇸 Starburst SysOp Team	2026-07-23 09:46:30 (3 days ago)	(mod_security-custom) mod_security (id:210492) triggered by 119.13.156.100 (KH/Cambodia/Phnom Penh/C ... show more (mod_security-custom) mod_security (id:210492) triggered by 119.13.156.100 (KH/Cambodia/Phnom Penh/Chrang Chamreh Muoy/-/[AS38623 VIETTELCAMBODIA-AS-AP ISPIXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.]): 1 in the last 3600 secs (0-srv1) show less	Hacking
Anonymous	2026-07-23 04:31:41 (3 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇧🇷 Peregrine	2026-07-23 03:09:08 (3 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 119.13.156.100 104.22.66.4 - - [20/Jul/2026:18:00:55 -030 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 119.13.156.100 104.22.66.4 - - [20/Jul/2026:18:00:55 -0300] "GET /.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-22 18:37:09 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.100 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:37:04.606696 2026] [security2:error] [pid 1176202:tid 1176202] [client 119.13.156.100:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail-pmg.com"] [uri "/.env"] [unique_id "amEN0IKFkRW9D2OZ51SWHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mscode.pl	2026-07-22 13:04:46 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from KH. Action taken: BLOCK ASN: 38623 (ISP/IXP IN CAMBOD ... show more Triggered Cloudflare WAF (firewallCustom) from KH. Action taken: BLOCK ASN: 38623 (ISP/IXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.) Protocol: HTTP/1.1 (GET method) Zone: mscode.pl Endpoint: / UA: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 show less	Bad Web Bot

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.59.79

🇭🇰 23.101.8.71

🇺🇸 194.238.30.93

🇺🇿 170.168.6.27

🇺🇸 166.62.41.13

🇨🇳 182.138.158.226

🇻🇳 103.140.249.210

🇪🇸 88.21.23.5

🇺🇸 66.228.47.183

🇵🇱 176.53.159.198

🇨🇳 106.13.98.129

🇺🇸 85.239.151.10

🇻🇳 42.1.65.123

🇬🇧 195.206.182.219

🇧🇷 181.214.221.233

🇩🇪 167.94.146.46

🇳🇱 45.148.10.157

🇨🇳 36.135.62.85

🇩🇪 8.209.114.67

🇳🇱 91.92.42.126