JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

119.13.157.180

Recent Activity

Abuse Confidence Score

72% Elevated

26 reports

16 reporters · latest 14 hours ago

ISP: VIETTEL (CAMBODIA) PTE., LTD
Usage Type: Fixed Line ISP
ASN: AS38623
Domain Name: metfone.com.kh
Country: 🇰🇭 Cambodia
City: Phnom Penh, Phnom Penh

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

26 from 16 distinct reporters

First reported

October 2nd 2025

Most recent report

14 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 4 🇦🇺 Australia 2

Most common categories Brute-Force 6 Port Scan 6 Bad Web Bot 6 Web App Attack 4 Hacking 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-11-10 10:50:25 UTC · (14 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 throny	2026-11-10 10:45:17 UTC · (14 hours ago)	Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 1 on 1 host(s) User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 ... show more Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...). Requests within an hour: 1 on 1 host(s) User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa Requested, e.g.: - sonarqube.[REDACTED]/wp-login.php show less	Web App Attack
🇬🇧 Axel	2026-11-10 04:59:55 UTC · (20 hours ago)	Blocked by UFW on BGPGB [23/tcp] \| SPT: 7114 \| TTL: 46 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted
🇯🇵 S.O.B.A. Dev.	2026-11-10 03:27:07 UTC · (22 hours ago)	Repeated SSH login failures	SSH Port Scan Brute-Force
🇺🇸 [email protected]	2026-11-09 14:30:09 UTC · (1 day ago)	1 unauthorized Telnet login attempt; interactive shell session after a successful login; payload: shell commands; seen 2026-11-09 (UTC)	Hacking Brute-Force IoT Targeted
🇩🇪 Tsumugi Kotobuki	2026-11-09 11:52:08 UTC · (1 day ago)	Telnet Brute-Force \| Events: 1 \| Ports: 23/Telnet \| Auth: password(1x) \| F2B/telnet-honeypot-bruteforce@2026-11-09T11:52:08Z	Brute-Force
🇫🇷 security.rdmc.fr	2026-11-09 02:10:39 UTC · (1 day ago)	Port Scan Attack proto:TCP src:19774 dst:23	Port Scan
🇬🇧 Axel	2026-11-08 10:51:32 UTC · (2 days ago)	Blocked by UFW on BGPGB [23/tcp] \| SPT: 9269 \| TTL: 46 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted
🇹🇼 kk_it_man	2026-11-06 11:10:01 UTC · (4 days ago)	honey catch	Port Scan
Anonymous	2026-11-06 08:13:53 UTC · (4 days ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
Anonymous	2026-10-30 11:10:05 UTC · (1 week ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2026-10-30 00:16:49 UTC · (1 week ago)	(mod_security) mod_security (id:225080) triggered by 119.13.157.180 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:16:45.484471 2026] [security2:error] [pid 19589:tid 19589] [client 119.13.157.180:5368] ... show more (mod_security) mod_security (id:225080) triggered by 119.13.157.180 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:16:45.484471 2026] [security2:error] [pid 19589:tid 19589] [client 119.13.157.180:5368] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|daveware.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daveware.net"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/img/"] [unique_id "auPh7RKjxhIqsPsYQaHFIQAAABQ"], referer: http://daveware.net/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-27 11:05:05 UTC · (2 weeks ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2026-10-23 13:26:16 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 119.13.157.180 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:26:09.644512 2026] [security2:error] [pid 477:tid 559] [client 119.13.157.180:26776] Mod ... show more (mod_security) mod_security (id:210350) triggered by 119.13.157.180 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:26:09.644512 2026] [security2:error] [pid 477:tid 559] [client 119.13.157.180:26776] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|potterpuppetpals.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "potterpuppetpals.com"] [uri "/"] [unique_id "attgcVRyk_6mKa4IoEBAIQAAAcs"], referer: https://berkeleyaloha.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-20 08:53:05 UTC · (3 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=63&topics%5B2%5D=81&topics%5B3%5D=39&topics%5B4%5D=89 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=63&topics%5B2%5D=81&topics%5B3%5D=39&topics%5B4%5D=89 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15") show less	DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 178.141.240.148

🇭🇰 165.154.41.6

🇻🇳 103.12.76.194

🇺🇸 66.132.172.157

🇺🇸 64.62.197.127

🇺🇸 45.156.129.80

🇺🇸 24.234.206.140

🇩🇪 212.132.75.202

🇳🇱 204.76.203.221

🇳🇱 204.76.203.18

🇺🇸 199.165.159.32

🇧🇪 198.235.24.193

🇺🇦 194.44.131.135

🇺🇸 162.243.163.8

🇸🇬 114.119.129.163

🇹🇭 106.0.166.123

🇵🇱 91.244.213.32

🇷🇺 91.218.102.33

🇨🇦 85.217.149.26

🇷🇸 77.105.37.219