JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.13.156.76

119.13.156.76 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 14%: ?

14%

ISP	VIETTEL (CAMBODIA) PTE., LTD
Usage Type	Fixed Line ISP
ASN	AS38623
Domain Name	metfone.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.13.156.76

Whois 119.13.156.76

IP Abuse Reports for 119.13.156.76:

This IP address has been reported a total of 47 times from 23 distinct sources. 119.13.156.76 was first reported on July 25th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-07 10:39:45 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-06-18 03:03:05 (1 month ago)	Scraping webshop URLs (www.creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇦🇺 prologic	2026-06-13 04:24:30 (1 month ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
Anonymous	2025-08-21 16:33:12 (11 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇺🇸 TPI-Abuse	2025-08-21 14:30:12 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 10:30:06.637464 2025] [security2:error] [pid 5368:tid 5466] [client 119.13.156.76:2379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kincers.com"] [uri "/.env"] [unique_id "aKctbinySmWbadKlMwkKDgAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-21 13:45:11 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 09:45:03.974909 2025] [security2:error] [pid 8117:tid 8117] [client 119.13.156.76:44796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.env"] [unique_id "aKci36IZWMizlN2f415KKgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 www.elivecd.org	2025-08-21 13:24:54 (11 months ago)	119.13.156.76 - - [21/Aug/2025:14:24:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more 119.13.156.76 - - [21/Aug/2025:14:24:53 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 162 "-" "python-requests/2.24.0" ... show less	DDoS Attack
Anonymous	2025-08-21 08:05:36 (11 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇧🇪 voormedia	2025-08-21 07:27:54 (11 months ago)	Accessed trap at '/.env'	Web App Attack
🇩🇪 Ba-Yu	2025-08-21 07:08:55 (11 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-08-21 06:10:47 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 119.13.156.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 02:10:39.627999 2025] [security2:error] [pid 12952:tid 12952] [client 119.13.156.76:19797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egressstudio.com"] [uri "/.env"] [unique_id "aKa4X7naeO-YE4oDJvkFKQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2025-08-20 21:38:39 (11 months ago)	GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇮🇪 RoboSOC	2025-08-20 06:06:30 (11 months ago)	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
Anonymous	2025-08-20 00:20:04 (11 months ago)	Restricted File Access Requests	Hacking Brute-Force
🇩🇪 HERA - Operations	2025-08-19 20:39:19 (11 months ago)	club-herrmann - searching for vulnerable scripts: .env 2025/08/19 22:39:19	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.254.204.100

🇮🇩 163.7.11.155

🇱🇹 77.90.185.20

🇺🇸 2607:f8b0:4004:1007::12d

🇵🇰 223.123.92.132

🇺🇸 212.102.40.218

🇨🇳 202.105.64.102

🇺🇦 194.44.56.79

🇺🇸 159.89.188.79

🇺🇸 141.216.8.72

🇬🇧 134.209.191.208

🇺🇸 107.150.103.155

🇺🇸 107.150.103.88

🇺🇸 107.150.101.57

🇫🇷 93.4.16.74

🇩🇪 83.219.249.173

🇪🇸 80.91.86.169

🇺🇸 66.240.192.138

🇺🇸 34.196.112.251

🇧🇷 205.210.31.246