JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.56.2.120

202.56.2.120 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 23%: ?

23%

ISP	Smart Axiata Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS38600
Domain Name	smart.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.56.2.120

Whois 202.56.2.120

IP Abuse Reports for 202.56.2.120:

This IP address has been reported a total of 14 times from 11 distinct sources. 202.56.2.120 was first reported on February 25th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 10:33:40 (15 hours ago)	(mod_security) mod_security (id:210350) triggered by 202.56.2.120 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 202.56.2.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 06:33:27.620427 2026] [security2:error] [pid 23727:tid 23727] [client 202.56.2.120:2469] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pineconechristmascards.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pineconechristmascards.com"] [uri "/"] [unique_id "aq0Td5DH8BqCq0LH244ogQAAACI"], referer: https://freedaandpachecker.space/dir/seo-ranking-links-162522 show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 DrLex0	2026-09-06 11:44:03 (1 week ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 202.56.2.120 443 - [06/Sep/2026:11:44:03 +0000] "GET [redacted] HTTP/1.1" 410 6147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇪🇸 el-brujo	2026-08-27 17:46:07 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-07-31 15:13:58 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-06 18:35:32 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇪 KIDOS	2026-06-28 11:44:04 (2 months ago)	IIS malicious activity: sql_injection_attempt	Web App Attack
🇺🇸 kosada.com	2026-06-26 17:30:55 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-06-02 20:40:03 (3 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇹 A000Z	2026-04-21 03:00:40 (4 months ago)	Fail2Ban: 202.56.2.120 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 202.56.2.120 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-04-07 01:29:47 (5 months ago)	Scraping webshop URLs (www.s-goods.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 gui-ying233	2026-03-18 05:53:02 (6 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 mypatricks	2026-02-28 16:17:28 (6 months ago)	202.56.2.120 \| Port: 14301 \| DNS: 202.56.2.120 2026-03-01T00:17:27+08:00 Asia/Phnom_Penh \| IPs Spam ... show more 202.56.2.120 \| Port: 14301 \| DNS: 202.56.2.120 2026-03-01T00:17:27+08:00 Asia/Phnom_Penh \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 HTTP/1.1 443 GET \| URL: /cakes-for-ladies-female-wife-girl/?9d3cfaabb242b68eff073510b0b2004b=d09d9ba9b0&limit=10&order=DESC&page=3&sort=rating \| Ref: - \| Country: KH/Cambodia/+07:00 IP City: Phnom Penh Windows 9d513b57fb0a76b5-SIN/Singapore, Singapore 1 hits/0 secs Robots 6 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-02-25 19:21:23 (6 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 06:33:50 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 202.56.2.120 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 202.56.2.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 01:33:40.142521 2026] [security2:error] [pid 21496:tid 21496] [client 202.56.2.120:2478] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/emorivir.com"] [unique_id "aZ6XxE2nh7adzbSWJ64XQgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.78.116

🇧🇷 205.210.31.241

🇹🇷 195.142.175.196

🇨🇳 120.48.7.181

🇺🇸 104.139.193.49

🇺🇸 68.225.60.93

🇺🇸 45.79.192.229

🇮🇩 43.230.5.42

🇬🇧 195.206.182.214

🇨🇳 183.52.220.58

🇮🇳 172.83.83.194

🇻🇪 143.105.147.130

🇵🇭 122.54.164.179

🇧🇬 109.160.32.16

🇳🇱 89.21.67.132

🇫🇷 85.217.140.35

🇷🇺 82.208.71.68

🇳🇱 45.148.10.183

🇺🇸 205.210.31.77

🇰🇭 203.144.76.164