JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.189.152.30

203.189.152.30 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 0%: ?

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	headquarter.online.com.kh
Domain Name	online.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.189.152.30

Whois 203.189.152.30

IP Abuse Reports for 203.189.152.30:

This IP address has been reported a total of 85 times from 34 distinct sources. 203.189.152.30 was first reported on April 6th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-01-26 01:07:22 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from KH. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from KH. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇨🇭 Modules	2026-01-20 13:18:03 (4 months ago)	Open proxy socks5://203.189.152.30:1080 (RT:4301ms,Loc:Cambodia,ASN:AS23673)	Open Proxy
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-15 14:35:27 (4 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	DDoS Attack Brute-Force SSH
🇮🇹 VHosting	2026-01-09 01:03:52 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇹🇭 thaizone.com	2025-12-16 18:24:51 (5 months ago)	Password guessing attack (SM11) #1	Email Spam Brute-Force
🇲🇾 syokadmin	2025-11-01 06:21:15 (7 months ago)	203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [hello@ ... show more 203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-29 12:51:27 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 203.189.152.30 (headquarter.online.com.kh): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 203.189.152.30 (headquarter.online.com.kh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 08:51:19.500481 2025] [security2:error] [pid 1587:tid 1614] [client 203.189.152.30:55210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nimbll.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nimbll.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQINx-i_6W-KWliuBxrc7gAAAFQ"], referer: https://nimbll.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-10-24 15:59:32 (7 months ago)	203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [accoun ... show more 203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇮🇹 VHosting	2025-10-05 19:37:31 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-25 20:09:00 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-24 20:08:59 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 nowyouknow	2025-09-24 06:39:34 (8 months ago)	(From [email protected])	Phishing Web Spam
🇲🇾 syokadmin	2025-09-21 12:56:40 (8 months ago)	203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [accoun ... show more 203.189.152.30 (KH/Cambodia/headquarter.online.com.kh), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇧🇷 hostseries	2025-09-16 20:11:06 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-16 20:08:50 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.222.186

🇷🇺 157.22.100.69

🇺🇸 136.144.43.106

🇨🇳 120.238.23.168

🇰🇷 115.68.52.152

🇷🇴 80.94.92.71

🇳🇱 45.156.128.79

🇬🇧 35.242.135.37

🇺🇸 35.231.131.247

🇺🇸 34.174.146.189

🇫🇮 34.88.3.4

🇦🇺 34.87.218.202

🇦🇺 34.40.248.19

🇯🇵 15.152.165.213

🇮🇩 2620:171:74:f003:9999::244

🇨🇱 190.5.37.215

🇲🇽 187.133.221.210

🇨🇳 163.179.39.100

🇺🇸 159.183.119.211

🇩🇪 77.176.53.15