JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.56.2.101

202.56.2.101 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 28%: ?

28%

ISP	Smart Axiata Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS38600
Domain Name	smart.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.56.2.101

Whois 202.56.2.101

IP Abuse Reports for 202.56.2.101:

This IP address has been reported a total of 13 times from 10 distinct sources. 202.56.2.101 was first reported on July 22nd 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-14 18:06:20 (8 hours ago)	[Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Target ... show more [Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages, URL template abuse show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-14 18:06:20 (8 hours ago)	ELEVATED_THREAT \| 621 IPs targeting /brand.html \| URL template shared by 220 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 621 IPs targeting /brand.html \| URL template shared by 220 IPs: /brand.html?bulb_shape_type=&bulb_shape=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.96, unique_ips=820) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-07-11 10:17:25 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 202.56.2.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 202.56.2.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 06:17:18.724024 2026] [security2:error] [pid 15993:tid 15993] [client 202.56.2.101:5850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.circleofsound.orghttp\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.circleofsound.orghttp"] [uri "/www.circleofsound.org/[email protected]"] [unique_id "alIYLnTg9vzIyr1XF5T9TwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 05:59:59 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-10 17:42:38 (1 month ago)	[Thu Jun 11 00:42:37.986144 2026] [security2:error] [pid 708402:tid 139785247110848] [client 202.56. ... show more [Thu Jun 11 00:42:37.986144 2026] [security2:error] [pid 708402:tid 139785247110848] [client 202.56.2.101:3582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "aimiDaDTd1wGC6_etAbrHAAAAdQ"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[708449] [E0j7xCkn5KM] [aimiDaDTd1wGC6_etAbrHAAAAdQ] keep_alive=[0] [2026-06-11 00:42:37.986150] [R:aimiDaDTd1wGC6_etAbrHAAAA ... show less	Email Spam Hacking
Anonymous	2026-05-22 04:10:11 (1 month ago)	Attack Signature Blocked: /wishlist/index/add/product/4263/form_key/NiwxHOg8Lgyx0sJT/ (Magento Site) ... show more Attack Signature Blocked: /wishlist/index/add/product/4263/form_key/NiwxHOg8Lgyx0sJT/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇸🇬 mypatricks	2026-03-09 05:07:25 (4 months ago)	202.56.2.101 \| Port: 11971 \| DNS: 202.56.2.101 2026-03-09T13:07:23+08:00 Asia/Phnom_Penh \| IPs Spam ... show more 202.56.2.101 \| Port: 11971 \| DNS: 202.56.2.101 2026-03-09T13:07:23+08:00 Asia/Phnom_Penh \| IPs Spam list \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /bride-silhouette-wedding-cake/?95ca9c67060809ad414e043f=enabled&d00c97243dedab7a883a2f34cb685fe9=1772619920 \| Ref: https://xxxxxx/bride-silhouette-wedding-cake/?code=SGD&d81ee0f7330a0703d303c41140303ab=SGD \| Country: KH/Cambodia/+07:00 IP City: Phnom Penh macOS 9d978e2aea9b5fbd-SIN/Singapore, Singapore 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 matt	2026-03-02 21:21:41 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇸🇬 bioxten.com	2025-11-01 03:43:27 (8 months ago)	Port Scan detected from 202.56.2.101 (KH/Cambodia/Phnom Penh/Phnom Penh/-/[AS38600 SMART-AXIATA-KH ... show more Port Scan detected from 202.56.2.101 (KH/Cambodia/Phnom Penh/Phnom Penh/-/[AS38600 SMART-AXIATA-KH SMART AXIATA Co., Ltd.]). 11 hits in the last 45 seconds show less	Brute-Force
🇳🇱 exxos	2025-09-02 00:05:22 (10 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-09-01 23:03:01 (10 months ago)	http-no-verb	Hacking
🇳🇱 Study Bitcoin 🤗	2025-07-26 05:58:26 (11 months ago)	13 port probes: tcp/80 (http), tcp/81 (hosts2 name), tcp/82 (xfer utility), tcp/83 (mit ml device), ... show more 13 port probes: tcp/80 (http), tcp/81 (hosts2 name), tcp/82 (xfer utility), tcp/83 (mit ml device), tcp/84 (common trace facility), tcp/85 (mit ml device), tcp/86 (micro focus cobol), tcp/87 (any private terminal link), tcp/88 (kerberos), tcp/89 (su), tcp/90 (dnsix securit attribute token map), tcp/8080 (http), tcp/8888 (newsedge) [srv129] show less	Port Scan Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-07-22 13:58:35 (11 months ago)	13 port probes: tcp/80 (http), tcp/81 (hosts2 name), tcp/82 (xfer utility), tcp/83 (mit ml device), ... show more 13 port probes: tcp/80 (http), tcp/81 (hosts2 name), tcp/82 (xfer utility), tcp/83 (mit ml device), tcp/84 (common trace facility), tcp/85 (mit ml device), tcp/86 (micro focus cobol), tcp/87 (any private terminal link), tcp/88 (kerberos), tcp/89 (su), tcp/90 (dnsix securit attribute token map), tcp/8080 (http), tcp/8888 (newsedge) [srv129] show less	Port Scan Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 185.100.212.141

🇨🇳 61.136.246.87

🇬🇧 35.203.210.190

🇯🇵 8.221.140.241

🇧🇷 205.210.31.237

🇵🇭 203.177.64.130

🇬🇧 193.163.125.84

🇬🇧 193.138.195.242

🇸🇬 178.128.51.84

🇩🇿 154.242.43.28

🇷🇴 141.98.83.48

🇺🇸 102.129.152.223

🇫🇮 83.97.78.224

🇩🇪 81.89.170.55

🇷🇴 80.94.92.55

🇫🇮 77.105.130.18

🇯🇲 72.252.167.12

🇺🇸 47.251.86.188

🇺🇸 23.122.167.191

🇨🇦 20.151.205.204