JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 160.202.35.35

160.202.35.35 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 6%: ?

ISP	Angkor Data Communication
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	🇰🇭 Cambodia
City	Paoy Paet, Banteay Meanchey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 160.202.35.35

Whois 160.202.35.35

IP Abuse Reports for 160.202.35.35:

This IP address has been reported a total of 54 times from 16 distinct sources. 160.202.35.35 was first reported on January 15th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-04 10:02:03 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-05-03 07:50:28 (1 month ago)	tcp/23 (2 or more attempts)	Port Scan
🇮🇩 sockominfo	2026-01-20 09:00:04 (5 months ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 ( ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 38%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-01-20 08:30:25 (5 months ago)	Honey Pot Hit / Attack Vector found!	Port Scan Hacking Web App Attack
🇮🇩 sockominfo	2026-01-20 03:00:03 (5 months ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 ( ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 40%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-20 01:00:10 (5 months ago)	Access to sensitive configuration files success.. Threat Score: 7.8/10 (HIGH). CVSS: 7/10 (High). Ba ... show more Access to sensitive configuration files success.. Threat Score: 7.8/10 (HIGH). CVSS: 7/10 (High). Bayesian: 83%. MITRE: T1210. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-20 00:00:32 (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-19 22:00:25 (5 months ago)	Access to sensitive configuration files success.. Threat Score: 6.4/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 6.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-19 21:00:06 (5 months ago)	Access to sensitive configuration files success., Access to sensitive files detected w/ specific bou ... show more Access to sensitive configuration files success., Access to sensitive files detected w/ specific boundary.. Threat Score: 8/10 (CRITICAL). CVSS: 7/10 (High). Bayesian: 90%. MITRE: T1210. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-19 19:00:03 (5 months ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 ( ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 3.7/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 33%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-19 18:00:24 (5 months ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 0/10 (INFORMATIONAL). Report ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇯🇵 VXG-NET	2026-01-19 17:13:51 (5 months ago)	port=80, indicator_type=info-leak	Hacking
Anonymous	2026-01-19 17:00:02 (5 months ago)		Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-01-19 15:28:45 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 160.202.35.35 (KH/Cambodia/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 160.202.35.35 (KH/Cambodia/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 14:50:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 160.202.35.35 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 160.202.35.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 09:50:05.207096 2026] [security2:error] [pid 3706:tid 3706] [client 160.202.35.35:47142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panmaneecnc.com"] [uri "/sftp-config.json"] [unique_id "aW5EnSl-lmtnzgzcI4lf6AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 65.49.1.196

🇺🇸 54.198.42.250

🇨🇳 14.103.10.167

🇫🇷 193.70.122.120

🇲🇰 185.193.240.246

🇺🇸 178.95.106.38

🇻🇳 171.225.198.237

🇩🇪 165.227.170.113

🇧🇬 78.128.112.6

🇺🇸 64.62.197.199

🇯🇵 8.216.2.69

🇧🇪 198.235.24.218

🇸🇬 165.22.245.124

🇫🇮 147.185.133.75

🇨🇳 117.191.83.250

🇲🇦 105.157.135.169

🇮🇩 103.217.217.106

🇹🇷 81.213.124.118

🇱🇹 62.60.130.219

🇨🇦 51.222.30.51