JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.248.173.56

124.248.173.56 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 46%: ?

46%

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	fiber-173-56.online.com.kh
Domain Name	cogetel.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.248.173.56

Whois 124.248.173.56

IP Abuse Reports for 124.248.173.56:

This IP address has been reported a total of 95 times from 40 distinct sources. 124.248.173.56 was first reported on July 2nd 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-15 21:04:00 (2 days ago)	NOQUEUE - IP: 124.248.173.56 - Jun 15 23:04:00 plesk postfix/smtpd[2382483]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 124.248.173.56 - Jun 15 23:04:00 plesk postfix/smtpd[2382483]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using dnsbl-1.uceprotect.net; IP 124.248.173.56 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=124.248.173.56; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<fiber-173-56.online.com.kh> show less	Email Spam
🇷🇸 Smel	2026-06-14 05:49:20 (4 days ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇨🇦 Unknown User	2026-06-11 18:38:00 (6 days ago)		Email Spam
🇩🇪 hbrks	2026-06-10 23:19:56 (1 week ago)	PMG Antispam: Auth/Protocol Failure	Email Spam
🇨🇭 Origon	2026-06-10 17:56:00 (1 week ago)	NOQUEUE - IP: 124.248.173.56 - Jun 10 19:56:00 plesk postfix/smtpd[2004721]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 124.248.173.56 - Jun 10 19:56:00 plesk postfix/smtpd[2004721]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using dnsbl-1.uceprotect.net; IP 124.248.173.56 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=124.248.173.56; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<fiber-173-56.online.com.kh> show less	Email Spam
🇮🇹 www.tana.it	2026-06-09 18:09:28 (1 week ago)	SPF failure	Spoofing
🇩🇪 Viveronese	2026-05-31 10:09:30 (2 weeks ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-30 14:10:24 (2 weeks ago)	NOQUEUE - IP: 124.248.173.56 - May 30 16:10:24 plesk postfix/smtpd[2710570]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 124.248.173.56 - May 30 16:10:24 plesk postfix/smtpd[2710570]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using dnsbl-1.uceprotect.net; IP 124.248.173.56 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=124.248.173.56; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<fiber-173-56.online.com.kh> show less	Email Spam
🇩🇪 filstal.org	2026-05-28 11:07:10 (2 weeks ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-05-26 21:55:12 (3 weeks ago)	NOQUEUE - IP: 124.248.173.56 - May 26 23:55:12 plesk postfix/smtpd[3794559]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 124.248.173.56 - May 26 23:55:12 plesk postfix/smtpd[3794559]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using dnsbl-1.uceprotect.net; IP 124.248.173.56 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=124.248.173.56; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<fiber-173-56.online.com.kh> show less	Email Spam
Anonymous	2026-05-26 13:56:17 (3 weeks ago)	2026-05-26T15:56:15.874468+02:00 gollum postfix/smtpd[493578]: NOQUEUE: reject: RCPT from unknown[12 ... show more 2026-05-26T15:56:15.874468+02:00 gollum postfix/smtpd[493578]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/124.248.173.56 / Listed by PBL, see https://check.spamhaus.org/query/ip/124.248.173.56 / Listed by XBL, see https://check.spamhaus.org/query/ip/124.248.173.56; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<124.248.173.56> ... show less	Email Spam
Anonymous	2026-05-26 13:45:29 (3 weeks ago)	SpamAssassin score 19.2 exceeded block threshold 15.0	Email Spam
🇨🇭 Origon	2026-04-29 14:05:42 (1 month ago)	NOQUEUE - IP: 124.248.173.56 - Apr 29 16:05:42 plesk postfix/smtpd[2788879]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 124.248.173.56 - Apr 29 16:05:42 plesk postfix/smtpd[2788879]: NOQUEUE: reject: RCPT from unknown[124.248.173.56]: 554 5.7.1 Service unavailable; Client host [124.248.173.56] blocked using dnsbl-3.uceprotect.net; Your ISP ONLINE-AS Cogetel Online, Cambodia, ISP, KH/AS23673 is UCEPROTECT-Level3 listed because of a spamscore of 573.7. See: http://www.uceprotect.net/rblcheck.php?ipr=124.248.173.56; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<fiber-173-56.online.com.kh> show less	Email Spam
🇸🇪 gandalf	2026-04-20 14:43:14 (1 month ago)	2026-04-20 16:43:12 wonderland sendmail[69194]: 63KEh5VP069194: ruleset=check_rcpt, arg1=<par.bertil ... show more 2026-04-20 16:43:12 wonderland sendmail[69194]: 63KEh5VP069194: ruleset=check_rcpt, arg1=<[email protected]>, relay=fiber-173-56.online.com.kh [124.248.173.56] (may be forged), reject=550 5.7.1 <[email protected]>... Mail from 124.248.173.56 refused - see http://www.spamhaus.org/zen/ show less	Brute-Force Email Spam
🇮🇹 VHosting	2026-04-12 02:09:02 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.9.147

🇺🇸 207.90.244.18

🇩🇪 195.230.103.245

🇳🇱 192.42.116.101

🇫🇮 147.185.133.37

🇸🇬 47.84.203.75

🇨🇳 27.128.170.160

🇩🇪 5.44.111.80

🇮🇷 2.180.32.104

🇺🇸 162.216.150.52

🇺🇸 162.216.149.69

🇦🇫 149.54.62.170

🇳🇱 91.92.40.8

🇲🇦 81.192.138.65

🇩🇪 47.254.184.178

🇫🇷 46.163.72.164

🇫🇷 37.60.238.43

🇩🇪 5.44.111.149

🇺🇸 172.202.117.179

🇷🇺 158.160.195.138