JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.189.153.19

203.189.153.19 was found in our database!

This IP was reported 169 times. Confidence of Abuse is 55%: ?

55%

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	headquarter.online.com.kh
Domain Name	online.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.189.153.19

Whois 203.189.153.19

IP Abuse Reports for 203.189.153.19:

This IP address has been reported a total of 169 times from 78 distinct sources. 203.189.153.19 was first reported on August 13th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Lunix	2026-07-18 10:13:18 (13 hours ago)		Brute-Force Web App Attack
🇵🇱 nfsec.pl	2026-07-18 06:14:00 (17 hours ago)	203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /submissions_uploads/journals HTTP/1.1" 404 301 ... show more 203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /submissions_uploads/journals HTTP/1.1" 404 30106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /filessss/journals HTTP/1.1" 404 30077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /submissions_files/journals HTTP/1.1" 404 29966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /review/journals HTTP/1.1" 404 30069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 203.189.153.19 - - [18/Jul/2026:06:14:00 +0000] "GET /filesss/journals HTTP/1.1" 404 30095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show less	Web App Attack Exploited Host
🇫🇷 SpaceHost-Server	2026-07-17 22:31:46 (1 day ago)		Brute-Force Web App Attack
🇪🇸 librebit	2026-07-17 14:35:56 (1 day ago)	Brute force	Brute-Force
🇺🇸 kosada.com	2026-07-16 00:42:38 (2 days ago)	Web vulnerability probing: /user/login/api/login	Web App Attack
🇺🇸 kosada.com	2026-07-16 00:42:36 (2 days ago)	Web vulnerability probing: /user/login/api/login	Web App Attack
🇮🇩 sockominfo	2026-07-14 22:00:52 (4 days ago)	Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 8. ... show more Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-14 21:00:28 (4 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-14 20:00:09 (4 days ago)	Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 7/ ... show more Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 7/10 (MEDIUM). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 LRob	2026-07-14 11:30:41 (4 days ago)	CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-10 22:28:37 (1 week ago)		Brute-Force Web App Attack
🇺🇸 LARL-Stompro-2024	2026-07-10 21:04:30 (1 week ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:2	Bad Web Bot
🇱🇻 garmtech.com	2026-05-23 14:36:47 (1 month ago)	IM360 WAF: Attempt to upload malware	Hacking
🇪🇸 masterguru	2026-05-22 01:52:06 (1 month ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking
🇨🇭 Origon	2026-05-17 12:20:22 (2 months ago)	http-wordpress_user-enum - IP: 203.189.153.19 - time="2026-05-17T14:20:22+02:00" level=info msg="(5 ... show more http-wordpress_user-enum - IP: 203.189.153.19 - time="2026-05-17T14:20:22+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 203.189.153.19 (KH/23673) : 4h ban on Ip 203.189.153.19" module=db show less	Web App Attack

Showing 1 to 15 of 169 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.111.97.70

🇵🇰 144.48.135.2

🇹🇷 85.105.255.56

🇦🇷 64.76.8.21

🇫🇷 51.75.129.178

🇹🇷 92.44.25.111

🇸🇪 89.233.194.35

🇨🇦 51.222.168.48

🇳🇱 45.156.128.103

🇳🇱 45.148.10.152

🇵🇰 39.34.188.84

🇻🇳 157.66.47.83

🇺🇸 147.185.132.12

🇷🇴 92.118.39.77

🇩🇪 69.5.169.58

🇳🇿 60.234.137.215

🇨🇱 45.166.147.237

🇩🇪 43.228.157.62

🇳🇱 185.226.197.33

🇮🇳 182.95.123.102