JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.147.140.76

203.147.140.76 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 24%: ?

24%

ISP	Angkor Data Communication
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.147.140.76

Whois 203.147.140.76

IP Abuse Reports for 203.147.140.76:

This IP address has been reported a total of 33 times from 26 distinct sources. 203.147.140.76 was first reported on February 8th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 17:17:00 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 13:16:53.666809 2026] [security2:error] [pid 24332:tid 24332] [client 203.147.140.76:4551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mitchellamazing.com"] [uri "/.env"] [unique_id "aklABfX8CSdBMDmz3x5f8QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 16:59:00 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 12:58:54.943572 2026] [security2:error] [pid 19346:tid 19346] [client 203.147.140.76:24297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vsecuritysolutions.com"] [uri "/.env"] [unique_id "akk7zmD3FzPsO5NOMsVZ_QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-04 16:55:55 (4 hours ago)	IM360 WAF: Laravel Apps Leaking Secrets exploit attempt MV:androxgh0st	Web App Attack
🇱🇻 garmtech.com	2026-07-04 16:55:54 (4 hours ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 16:43:36 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 203.147.140.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 12:43:28.486766 2026] [security2:error] [pid 15430:tid 15430] [client 203.147.140.76:24032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frame-sa.com"] [uri "/.env"] [unique_id "akk4MBdfrgMVZPD4upFF0gAAADY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 10:01:18 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇿 unhfree.net	2026-03-31 12:50:41 (3 months ago)	Mar 31 14:50:27 canopus postfix/smtpd[1591496]: NOQUEUE: reject: RCPT from unknown[203.147.140.76]: ... show more Mar 31 14:50:27 canopus postfix/smtpd[1591496]: NOQUEUE: reject: RCPT from unknown[203.147.140.76]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.18.243]> Mar 31 14:50:29 canopus postfix/smtpd[1591496]: NOQUEUE: reject: RCPT from unknown[203.147.140.76]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.18.243]> Mar 31 14:50:33 canopus postfix/smtpd[1591496]: NOQUEUE: reject: RCPT from unknown[203.147.140.76]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.18.243]> Mar 31 14:50:36 canopus postfix/smtpd[1591496]: NOQUEUE: reject: RCPT from unknown[203.147.140.76]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<websh ... show less	Brute-Force Exploited Host
🇦🇹 urnilxfgbez	2026-03-28 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 chronos	2026-03-26 11:36:09 (3 months ago)	Generic malicious activity detected: ALERT: External attempt to access critical TCP port... \| Proto: ... show more Generic malicious activity detected: ALERT: External attempt to access critical TCP port... \| Proto: TCP \| Port: 8080 \| Location: Australia, N/A show less	Port Scan Hacking
🇩🇪 bontekoe.technology	2026-03-25 00:58:29 (3 months ago)	Port scan or Brute-Force detected. (src_port=1988, dst_port=23)	Brute-Force
🇷🇸 Smel	2026-03-24 08:15:13 (3 months ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-03-23 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-03-23 15:56:17 (3 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇬🇧 wiredalter	2026-03-23 11:36:55 (3 months ago)	Blocked by fail2ban on cVPS [80/tcp] Source Port: 1868 TTL: 245 Packet Length: 40 TOS: 0x00 Analyze ... show more Blocked by fail2ban on cVPS [80/tcp] Source Port: 1868 TTL: 245 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
Anonymous	2026-03-20 13:11:17 (3 months ago)	Unauthorized connection to Telnet port 23	Port Scan

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.161.52.149

🇧🇪 198.235.24.205

🇷🇴 193.32.162.84

🇧🇷 179.48.4.14

🇺🇸 162.216.150.240

🇨🇳 123.145.9.197

🇻🇳 118.70.182.193

🇫🇷 91.196.152.119

🇳🇱 45.198.224.15

🇺🇸 24.187.213.29

🇺🇸 3.216.91.233

🇪🇬 213.131.64.123

🇱🇻 195.13.239.106

🇫🇮 147.185.133.246

🇹🇷 94.154.43.181

🇩🇪 87.120.84.174

🇨🇳 61.176.71.84

🇪🇸 46.24.47.94

🇧🇷 205.210.31.242

🇨🇳 182.43.76.120