JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.13.156.102

119.13.156.102 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 48%: ?

48%

ISP	VIETTEL (CAMBODIA) PTE., LTD
Usage Type	Fixed Line ISP
ASN	AS38623
Domain Name	metfone.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.13.156.102

Whois 119.13.156.102

IP Abuse Reports for 119.13.156.102:

This IP address has been reported a total of 15 times from 12 distinct sources. 119.13.156.102 was first reported on September 1st 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-10 00:57:56 (1 hour ago)	Scraping webshop URLs (www.elliptigobenelux.com), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 ghostwarriors	2026-07-09 00:21:19 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-06 08:06:13 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-07-03 08:42:11 (6 days ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 ambor	2026-06-19 02:18:04 (2 weeks ago)	Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:7 ... show more Attack type: honeypot_lure \| Target: /.env \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:7 \| Country: KH show less	Hacking
Anonymous	2026-06-18 01:15:02 (3 weeks ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 01:02:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 21:01:58.280943 2026] [security2:error] [pid 26225:tid 26225] [client 119.13.156.102:22111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web87.dnchosting.com"] [uri "/.env"] [unique_id "ajNDhh4a3kXQfeVR8Hz1HgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 baku.hosting	2026-06-15 02:50:14 (3 weeks ago)	CSF Auto Report: (smtpauth) Failed SMTP AUTH login from 119.13.156.102 (KH/Cambodia/-): 4 in the las ... show more CSF Auto Report: (smtpauth) Failed SMTP AUTH login from 119.13.156.102 (KH/Cambodia/-): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇧🇷 vfAcceloReporter	2026-06-13 14:18:21 (3 weeks ago)	119.13.156.102 - - [13/Jun/2026:11:18:21 -0300] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux ... show more 119.13.156.102 - - [13/Jun/2026:11:18:21 -0300] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Brute-Force Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-06-13 13:55:35 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:55:30.913744 2026] [security2:error] [pid 29116:tid 29116] [client 119.13.156.102:2607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trlservice.com"] [uri "/.env"] [unique_id "ai1hUo0qw3hpkX_Jp_9yngAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 02:22:02 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:21:57.795361 2026] [security2:error] [pid 8043:tid 8043] [client 119.13.156.102:14081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lopansri.com"] [uri "/.env"] [unique_id "aijKRVolBnOZVma2EvoaHQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-02-16 01:26:03 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.1 ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-22 11:29:21 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2024-09-01 11:33:16 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76c0:460::5e:4d

🇳🇱 195.178.110.232

🇧🇷 187.50.194.182

🇧🇷 187.40.215.162

🇧🇷 187.12.48.70

🇫🇮 147.185.133.255

🇫🇷 91.231.89.144

🇫🇷 91.231.89.93

🇩🇪 91.92.240.5

🇺🇸 50.6.197.105

🇺🇸 49.51.72.129

🇧🇷 45.131.226.99

🇪🇬 41.46.201.159

🇺🇸 20.65.195.47

🇺🇸 198.98.53.130

🇧🇬 193.24.211.107

🇧🇷 186.238.178.6

🇧🇷 186.200.104.66

🇱🇹 185.2.228.48

🇺🇸 184.186.104.101