JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.147.139.173

203.147.139.173 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 47%: ?

47%

ISP	Angkor Data Communication
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.147.139.173

Whois 203.147.139.173

IP Abuse Reports for 203.147.139.173:

This IP address has been reported a total of 18 times from 10 distinct sources. 203.147.139.173 was first reported on May 1st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-06 07:16:11 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:16:07.984784 2026] [security2:error] [pid 19244:tid 19244] [client 203.147.139.173:11542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|cmcnow.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cmcnow.net"] [uri "/xmlrpc.php"] [unique_id "aktWN7yz_zpIEEYlW2wqqwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-07-06 06:11:55 (5 days ago)	203.147.139.173 - - [06/Jul/2026 ...	Brute-Force
🇺🇸 TPI-Abuse	2026-07-06 05:12:19 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:12:12.498882 2026] [security2:error] [pid 19340:tid 19340] [client 203.147.139.173:4540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|rodzillacharters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodzillacharters.com"] [uri "/xmlrpc.php"] [unique_id "aks5LCaK35D1IAjG5B10tAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 04:43:43 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:43:38.782927 2026] [security2:error] [pid 13465:tid 13465] [client 203.147.139.173:10225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|smilingorc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "smilingorc.com"] [uri "/xmlrpc.php"] [unique_id "aksyer8OpmkfLyNZ8xoAgAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-06 04:00:40 (5 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇪🇸 alferez	2026-07-06 03:46:20 (5 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-06 03:39:11 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-07-05 03:20:43 (6 days ago)	(wordpress) Failed wordpress login from 203.147.139.173 (KH/Cambodia/-): (CF_ENABLE)	Brute-Force
🇫🇷 masterguru	2026-07-05 02:39:43 (6 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-05 01:11:47 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 21:11:40.929374 2026] [security2:error] [pid 2415:tid 2415] [client 203.147.139.173:13372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "akmvTK671RcTg1_VkO8HZAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:22:05 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:21:58.297777 2026] [security2:error] [pid 12503:tid 12503] [client 203.147.139.173:18989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|solucionesmercadeodigital.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "solucionesmercadeodigital.com"] [uri "/xmlrpc.php"] [unique_id "aj-kRoBdTzZqCiVJyPM3UAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 07:21:49 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 03:21:45.853623 2026] [security2:error] [pid 27050:tid 27075] [client 203.147.139.173:3887] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|metropaint.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "metropaint.net"] [uri "/xmlrpc.php"] [unique_id "aipiCfiig3wHNNWILQrCMAAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 05:51:03 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:50:55.702531 2026] [security2:error] [pid 1277:tid 1277] [client 203.147.139.173:9106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|dwightbrown.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dwightbrown.com"] [uri "/xmlrpc.php"] [unique_id "aipMv-C-rNYnqIhpnIoLhwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 03:46:59 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 23:46:55.034315 2026] [security2:error] [pid 12944:tid 12944] [client 203.147.139.173:6572] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.173 (+1 hits since last alert)\|famagustacyprus.eu\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "famagustacyprus.eu"] [uri "/xmlrpc.php"] [unique_id "aiovrxDDecnaN4q-TbhIHwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-06-09 04:03:33 (1 month ago)	Web attack from 203.147.139.173	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.245.175

🇩🇪 167.94.146.70

🇸🇪 140.248.242.111

🇭🇰 103.210.22.74

🇮🇳 103.172.220.69

🇺🇸 2a09:bac5:9443:3af::5e:69

🇻🇳 221.132.16.114

🇪🇹 196.189.3.1

🇸🇪 157.52.122.48

🇺🇸 152.32.208.7

🇲🇽 94.74.66.91

🇳🇱 85.11.167.183

🇱🇹 81.30.98.142

🇺🇸 74.109.176.236

🇧🇷 45.164.55.104

🇰🇿 37.99.54.110

🇺🇸 20.15.201.69

🇭🇰 2a09:bac5:3988:2646::3d0:3

🇺🇸 2a04:4e40:4410:0:7f:2b2b:d9f:d5fb

🇭🇰 156.245.246.50