AbuseIPDB » 119.13.157.19

119.13.157.19 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 49%: ?

49%

ISP	Viettel (Cambodia) Pte. Ltd.
Usage Type	Mobile ISP
Domain Name	metfone.com.kh
Country	Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 119.13.157.19

Whois 119.13.157.19

IP Abuse Reports for 119.13.157.19:

This IP address has been reported a total of 25 times from 12 distinct sources. 119.13.157.19 was first reported on September 7th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-03 07:55:31 (1 week ago)	BruteForce IMAP/POP3	Brute-Force
Anonymous	2024-09-28 12:50:53 (2 weeks ago)	119.13.157.19 - - [28/Sep/2024:14:50:53 +0200] "GET /.env HTTP/1.1" 403 496 "-" "Mozilla/5.0 (Macint ... show more119.13.157.19 - - [28/Sep/2024:14:50:53 +0200] "GET /.env HTTP/1.1" 403 496 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
webbfabriken	2024-09-28 00:15:51 (2 weeks ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
juguemosalacarioca.com	2024-09-28 00:07:03 (2 weeks ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
Kiwi Bloke	2024-09-27 17:06:19 (2 weeks ago)	Unauthorized connection attempt(s) from IP address 119.13.157.19	Brute-Force Web App Attack
TPI-Abuse	2024-09-27 15:02:40 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.13.157.19 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 119.13.157.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 27 11:02:35.608849 2024] [security2:error] [pid 297936:tid 297936] [client 119.13.157.19:33642] [client 119.13.157.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "herrell.net"] [uri "/.env"] [unique_id "ZvbJCy7dR6La5w8DJVmcbQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
sid3windr	2024-09-27 14:04:41 (2 weeks ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
Anonymous	2024-09-24 05:15:12 (2 weeks ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-23 08:55:30 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Cloudkul Cloudkul	2024-09-23 08:48:04 (2 weeks ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests.. show less	Brute-Force Web App Attack
TPI-Abuse	2024-09-23 07:52:59 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.13.157.19 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 119.13.157.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 23 03:52:55.449840 2024] [security2:error] [pid 25470:tid 25470] [client 119.13.157.19:26820] [client 119.13.157.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vsecuritysolutions.com"] [uri "/.env"] [unique_id "ZvEeV79RwgoTXWZ93xemEQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
sid3windr	2024-09-23 07:27:31 (2 weeks ago)	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (Tarpitted for , wasted 0B)	Web App Attack
Anonymous	2024-09-22 04:16:03 (2 weeks ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-20 07:42:35 (3 weeks ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Dorian GRANDHAY	2024-09-19 08:51:08 (3 weeks ago)	119.13.157.19 (KH/Cambodia/-), 5 distributed smtpauth attacks on account [[email protected]] in the la ... show more119.13.157.19 (KH/Cambodia/-), 5 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2024-09-19 10:50:12 dovecot_plain authenticator failed for ([192.168.0.100]) [119.13.157.19]:36879: 535 Incorrect authentication data ([email protected]) 2024-09-19 10:51:04 dovecot_plain authenticator failed for ([192.168.0.100]) [119.13.157.19]:60987: 535 Incorrect authentication data ([email protected]) 2024-09-19 10:50:18 dovecot_login authenticator failed for ([192.168.0.100]) [119.13.157.19]:36879: 535 Incorrect authentication data ([email protected]) 2024-09-19 10:44:54 dovecot_plain authenticator failed for (CMLZYTHO275CK3AKSWTX4TCJ55CB) [147.45.48.226]:40827: 535 Incorrect authentication data ([email protected]) 2024-09-19 10:48:00 dovecot_plain authenticator failed for (4A5V7KTM6J3GUL94CO) [103.12.174.143]:61350: 535 Incorrect authentication data ([email protected]) IP Addresses Blocked: show less	Port Scan