JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.56.2.94

202.56.2.94 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 17%: ?

17%

ISP	Smart Axiata Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS38600
Domain Name	smart.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.56.2.94

Whois 202.56.2.94

IP Abuse Reports for 202.56.2.94:

This IP address has been reported a total of 4 times from 4 distinct sources. 202.56.2.94 was first reported on January 26th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-09 04:23:59 (5 days ago)	[Tue Jun 09 11:23:55.690754 2026] [security2:error] [pid 200265:tid 139738371585728] [client 202.56. ... show more [Tue Jun 09 11:23:55.690754 2026] [security2:error] [pid 200265:tid 139738371585728] [client 202.56.2.94:18316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "aieVW4PYeQOS5rVeH1CGewAAAQc"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[200302] [bmLBfkrZCJo] [aieVW4PYeQOS5rVeH1CGewAAAQc] keep_alive=[0] [2026-06- ... show less	Email Spam Hacking
Anonymous	2026-05-23 03:56:31 (3 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/12353/form_key/q4uQNbfWR6CrUycM/img/fineart.pn ... show more Attack Signature Blocked: /wishlist/index/add/product/12353/form_key/q4uQNbfWR6CrUycM/img/fineart.png (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇸🇬 mypatricks	2026-05-13 06:06:04 (1 month ago)	202.56.2.94 \| Port: 10966 \| DNS: 202.56.2.94 2026-05-13T14:06:03+08:00 Asia/Phnom_Penh \| IPs Spam li ... show more 202.56.2.94 \| Port: 10966 \| DNS: 202.56.2.94 2026-05-13T14:06:03+08:00 Asia/Phnom_Penh \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /cakestore/cart/?1586303206=?en-gb \| Ref: - \| Country: KH/Cambodia/+07:00 IP City: Siem Reap Windows 9faf798818b2fda0-SIN/Singapore, Singapore 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 TPI-Abuse	2026-01-26 22:14:18 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 202.56.2.94 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 202.56.2.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 17:13:39.519174 2026] [security2:error] [pid 14030:tid 14030] [client 202.56.2.94:13856] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vividlee.com\|F\|2"] [data ".vividlee.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vividlee.com"] [uri "/wp/page/28/www.vividlee.com"] [unique_id "aXfnE-3AJISS021Kv9PJXQAAAEs"], referer: http://www.vividlee.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.111.65.14

🇩🇪 213.209.159.228

🇧🇪 198.235.24.186

🇩🇪 193.169.194.14

🇨🇳 182.242.169.42

🇨🇳 153.37.156.62

🇸🇬 103.187.146.33

🇻🇳 103.90.234.13

🇳🇱 80.82.77.48

🇸🇬 47.237.144.66

🇸🇬 47.84.195.65

🇦🇺 34.129.243.114

🇺🇸 216.180.246.151

🇵🇰 203.130.11.3

🇯🇵 202.172.25.51

🇹🇼 198.235.24.52

🇧🇷 190.89.136.163

🇧🇷 177.2.7.116

🇨🇳 115.190.185.31

🇵🇰 113.203.193.106