JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.147.139.33

203.147.139.33 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 96%: ?

96%

ISP	Angkor Data Communication
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.147.139.33

Whois 203.147.139.33

IP Abuse Reports for 203.147.139.33:

This IP address has been reported a total of 58 times from 31 distinct sources. 203.147.139.33 was first reported on May 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-27 04:20:11 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇳🇱 Site.eu	2026-08-26 16:14:08 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 ipoac.nl	2026-08-26 13:38:49 (2 days ago)	-:443 203.147.139.33 - - [26/Aug/2026:15:38:48 +0200] - "POST /xmlrpc.php HTTP/1.1" 403 4992 "-" "Je ... show more -:443 203.147.139.33 - - [26/Aug/2026:15:38:48 +0200] - "POST /xmlrpc.php HTTP/1.1" 403 4992 "-" "Jetpack by WordPress.com" show less	Bad Web Bot
Anonymous	2026-08-26 12:58:30 (2 days ago)	(wordpress) Failed wordpress login from 203.147.139.33 (KH/Cambodia/Phnom Penh/Phnom Penh/-/[redacte ... show more (wordpress) Failed wordpress login from 203.147.139.33 (KH/Cambodia/Phnom Penh/Phnom Penh/-/[redacted]) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-25 14:26:53 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:26:46.594363 2026] [security2:error] [pid 18244:tid 18244] [client 203.147.139.33:11089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.33 (+1 hits since last alert)\|jellisonrepair.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jellisonrepair.com"] [uri "/xmlrpc.php"] [unique_id "ao2mJiXMbNYA1_-9WNVBCgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-25 13:28:53 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 masterguru	2026-08-25 13:01:18 (3 days ago)	(xmlrpc) Apache: Failed xmlrpc access from 203.147.139.33 (KH/Cambodia/-): 10 in the last 3600 secs ... show more (xmlrpc) Apache: Failed xmlrpc access from 203.147.139.33 (KH/Cambodia/-): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-08-25 13:00:23 (3 days ago)	[redacted] 203.147.139.33 - - [25/Aug/2026:14:59:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 203.147.139.33 - - [25/Aug/2026:14:59:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 203.147.139.33 - - [25/Aug/2026:14:59:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 203.147.139.33 - - [25/Aug/2026:15:00:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 203.147.139.33 - - [25/Aug/2026:15:00:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site87617387.com" [redacted] 203.147.139.33 - - [25/Aug/2026:15:00:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" ... show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-08-25 13:00:13 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 19:10:39 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:10:33.573749 2026] [security2:error] [pid 8744:tid 8792] [client 203.147.139.33:4815] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.33 (+1 hits since last alert)\|frannykingsmith.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frannykingsmith.com"] [uri "/xmlrpc.php"] [unique_id "aon0KYZ9pA-lIOLtU1np7AAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 17:57:11 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 13:57:04.215187 2026] [security2:error] [pid 20362:tid 20362] [client 203.147.139.33:5494] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.33 (+1 hits since last alert)\|michaelkivisto.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michaelkivisto.com"] [uri "/xmlrpc.php"] [unique_id "aoni8PEmApMMUVSnVvWLHAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-22 10:51:25 (1 week ago)	203.147.139.33 - - [22/Aug/2026:06:50:20 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress. ... show more 203.147.139.33 - - [22/Aug/2026:06:50:20 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:06:50:30 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:06:50:41 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:06:51:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:06:51:24 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5262 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 09:33:05 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 203.147.139.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 05:33:01.543902 2026] [security2:error] [pid 3230:tid 3230] [client 203.147.139.33:12533] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 203.147.139.33 (+1 hits since last alert)\|nidusmbt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nidusmbt.com"] [uri "/xmlrpc.php"] [unique_id "aolszSHOwILRdcfSyTzZfgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-22 08:49:46 (1 week ago)	203.147.139.33 - - [22/Aug/2026:04:46:57 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress. ... show more 203.147.139.33 - - [22/Aug/2026:04:46:57 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:04:48:01 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:04:48:53 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:04:49:15 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" 203.147.139.33 - - [22/Aug/2026:04:49:46 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5612 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇮🇹 sssrit	2026-08-22 07:57:36 (1 week ago)	203.147.139.33 - - [22/Aug/2026:09:57:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 477 "-" "Jetpack by ... show more 203.147.139.33 - - [22/Aug/2026:09:57:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 477 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 203.147.139.33 - - [22/Aug/2026:09:57:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 477 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 213.215.219.164

🇵🇱 213.192.87.252

🇦🇷 160.238.170.73

🇨🇳 120.48.17.175

🇳🇴 85.165.104.58

🇧🇼 41.87.162.66

🇬🇧 5.226.140.64

🇮🇳 4.240.126.25

🇹🇭 223.27.244.164

🇪🇸 172.68.135.185

🇺🇸 162.216.150.118

🇮🇩 103.182.208.61

🇩🇪 91.92.240.38

🇫🇷 90.73.238.211

🇮🇱 85.159.164.28

🇧🇬 79.124.60.218

🇪🇸 46.8.174.161

🇺🇸 2600:1f18:5b75:b805:b77d:4fef:96b6:433f

🇺🇸 198.185.178.72

🇳🇱 195.178.110.228