Report for IP: 203.176.136.42

Threat LevelMEDIUM45/1001 rule type
1 incident on record · last seen 18d ago
PTR N/A
Org / ASN AS38235 ANGKOR DATA COMMUNICATION
Country 🇰🇭 Cambodia
City Phnom Penh, Phnom Penh
Timezone Asia/Phnom_Penh

Attack Analysis

🇰🇭 Cambodia · Phnom Phen City · 38235 · Mekongnet, Internet Service Provider (isp), Internet Exchange Provider (ixp) And Internet Data Exchange Center (idx)
IDS: Database Port Scan
Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Reports (1)

Date Severity Description
14 Jul 2026 - 08:20 high IDS: Database port scan — ET SCAN Suspicious inbound to MSSQL port 1433