JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.13.57.113

119.13.57.113 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 27%: ?

27%

ISP	VIETTEL (CAMBODIA) PTE., LTD
Usage Type	Fixed Line ISP
ASN	AS38623
Domain Name	metfone.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.13.57.113

Whois 119.13.57.113

IP Abuse Reports for 119.13.57.113:

This IP address has been reported a total of 26 times from 20 distinct sources. 119.13.57.113 was first reported on November 24th 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-06 14:51:08 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 10:51:04.218515 2026] [security2:error] [pid 10377:tid 10377] [client 119.13.57.113:26913] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.13.57.113 (+1 hits since last alert)\|shhcenter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shhcenter.com"] [uri "/xmlrpc.php"] [unique_id "aiQz2Mbgt5jyiiUsVbgjhgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-06-06 06:25:10 (18 hours ago)	(wordpress) Failed wordpress login from 119.13.57.113 (KH/Cambodia/-)	Brute-Force
🇫🇷 Lunix	2026-06-06 06:24:12 (18 hours ago)		Brute-Force Web App Attack
Anonymous	2026-06-06 05:20:10 (19 hours ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 12:13:42 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 08:13:37.663547 2026] [security2:error] [pid 2802:tid 2802] [client 119.13.57.113:41195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.13.57.113 (+1 hits since last alert)\|speedgo.mx\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "speedgo.mx"] [uri "/xmlrpc.php"] [unique_id "aiK9cS3hjxpstb8mfGehWwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 10:47:58 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 119.13.57.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:47:51.388242 2026] [security2:error] [pid 9597:tid 9597] [client 119.13.57.113:55544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 119.13.57.113 (+1 hits since last alert)\|mayiasteadman.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mayiasteadman.com"] [uri "/xmlrpc.php"] [unique_id "aiKpV8F8DmNnGJa1INwglgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 AWW-Admin	2025-12-01 21:30:23 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 119.13.57.113 (KH/Cambodia/-)	Brute-Force
Anonymous	2025-12-01 21:09:49 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 119.13.57.113 (KH/Cambodia/-)	Brute-Force
🇮🇹 Progetto1	2025-12-01 17:42:02 (6 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇺🇸 bigscoots.com	2025-12-01 14:49:13 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 119.13.57.113 (KH/Cambodia/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 119.13.57.113 (KH/Cambodia/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-12-01 09:20:19 dovecot_plain authenticator failed for (PMAJ2FF461FCD) [119.13.57.113]:44189: 535 Incorrect authentication data ([email protected]) 2025-12-01 09:20:26 dovecot_login authenticator failed for (PMAJ2FF461FCD) [119.13.57.113]:44189: 535 Incorrect authentication data ([email protected]) 2025-12-01 09:30:08 dovecot_plain authenticator failed for (E1261D68V5UP6) [119.13.57.113]:16494: 535 Incorrect authentication data ([email protected]) 2025-12-01 09:30:15 dovecot_login authenticator failed for (E1261D68V5UP6) [119.13.57.113]:16494: 535 Incorrect authentication data ([email protected]) 2025-12-01 09:49:09 dovecot_plain authenticator failed for (T31NGXPI6836) [119.13.57.113]:2686: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇭 Origon	2025-12-01 14:01:16 (6 months ago)	recidive - IP: 119.13.57.113 - 2025-12-01 11:06:53,274 fail2ban.actions [2596416]: NOTICE [plesk-po ... show more recidive - IP: 119.13.57.113 - 2025-12-01 11:06:53,274 fail2ban.actions [2596416]: NOTICE [plesk-postfix] Ban 119.13.57.113 2025-12-01 14:29:59,578 fail2ban.actions [2596416]: NOTICE [plesk-postfix] Ban 119.13.57.113 2025-12-01 15:01:13,759 fail2ban.actions [2596416]: NOTICE [plesk-postfix] Ban 119.13.57.113 show less	Web App Attack
🇨🇿 lp	2025-12-01 13:22:06 (6 months ago)	Email account brute force: 5 attempts were recorded from 119.13.57.113 2025-12-01T13:04:20+01:00 war ... show more Email account brute force: 5 attempts were recorded from 119.13.57.113 2025-12-01T13:04:20+01:00 warning: unknown[119.13.57.113]: SASL PLAIN authentication failed: authentication failure, [email protected] 2025-12-01T13:04:20+01:00 warning: unknown[119.13.57.113]: SASL PLAIN authentication failed: authentication failure, [email protected] 2025-12-01T13:04:21+01:00 warning: unknown[119.13.57.113]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-12-01T13:04:21+01:00 warning: unknown[119.13.57.113]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-12-01T13:04:25+01:00 warning: unknown[119.13.57.113]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇷🇸 Smel	2025-12-01 09:34:08 (6 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇨🇿 lp	2025-12-01 05:54:28 (6 months ago)	Email account brute force: 4 attempts were recorded from 119.13.57.113 2025-12-01T06:15:47+01:00 war ... show more Email account brute force: 4 attempts were recorded from 119.13.57.113 2025-12-01T06:15:47+01:00 warning: unknown[119.13.57.113]: SASL PLAIN authentication failed: authentication failure, [email protected] 2025-12-01T06:15:47+01:00 warning: unknown[119.13.57.113]: SASL PLAIN authentication failed: authentication failure, [email protected] 2025-12-01T06:15:48+01:00 warning: unknown[119.13.57.113]: SASL LOGIN authentication failed: authentication failure, [email protected] 2025-12-01T06:15:48+01:00 warning: unknown[119.13.57.113]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2025-12-01 05:13:32 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 119.13.57.113 (KH/Cambodia/-)	Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.86

🇬🇧 195.96.139.209

🇬🇧 193.176.29.21

🇫🇷 185.177.72.22

🇨🇳 171.220.244.134

🇺🇸 135.237.122.43

🇺🇦 128.0.104.44

🇺🇸 66.132.195.78

🇲🇾 47.250.94.154

🇺🇸 4.157.250.195

🇻🇳 116.110.156.108

🇧🇬 79.124.49.174

🇰🇷 49.247.36.49

🇺🇸 45.156.129.98

🇫🇷 45.154.138.30

🇺🇸 216.25.89.68

🇳🇱 176.65.149.50

🇺🇸 174.138.52.61

🇺🇸 147.185.132.224

🇵🇱 95.214.53.157