JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.189.137.208

203.189.137.208 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 39%: ?

39%

ISP	Cogetel Ltd, Online ISP, Cambodia
Usage Type	Fixed Line ISP
ASN	AS23673
Hostname(s)	mydsl128-137-208.online.com.kh
Domain Name	online.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.189.137.208

Whois 203.189.137.208

IP Abuse Reports for 203.189.137.208:

This IP address has been reported a total of 104 times from 49 distinct sources. 203.189.137.208 was first reported on August 11th 2021, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 mkaraki	2026-07-21 07:07:41 (22 hours ago)	1784617660 # Service_probe # SIGNATURE_SEND # source_ip:203.189.137.208 # dst_port:43753 ...	Port Scan
Anonymous	2026-07-07 21:57:28 (2 weeks ago)	SpamAssassin score 20.0 exceeded block threshold 15.0	Email Spam
Anonymous	2026-07-07 01:48:16 (2 weeks ago)	2026-07-07T03:48:15.727120+02:00 gollum postfix/smtpd[2043724]: NOQUEUE: reject: RCPT from unknown[2 ... show more 2026-07-07T03:48:15.727120+02:00 gollum postfix/smtpd[2043724]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/203.189.137.208 / Listed by XBL, see https://check.spamhaus.org/query/ip/203.189.137.208 / Listed by PBL, see https://check.spamhaus.org/query/ip/203.189.137.208; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> ... show less	Email Spam
🇩🇪 CK_beats	2026-07-07 01:30:04 (2 weeks ago)	Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 10 hits, proto=tcp, ports=25	Port Scan Hacking
🇨🇭 Origon	2026-07-07 01:26:17 (2 weeks ago)	NOQUEUE - IP: 203.189.137.208 - Jul 7 03:26:17 plesk postfix/smtpd[2124578]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 203.189.137.208 - Jul 7 03:26:17 plesk postfix/smtpd[2124578]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using dnsbl-1.uceprotect.net; IP 203.189.137.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=203.189.137.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> show less	Email Spam
Anonymous	2026-06-27 20:00:19 (3 weeks ago)	SPAM EMAIL 203.189.137.208 (mydsl128-137-208.online.com.kh)	Email Spam
🇷🇸 Smel	2026-06-26 05:04:59 (3 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇬🇧 Joe-Mark	2026-06-19 17:12:56 (1 month ago)	Found Mcafee IP Poor Reputation Blocklist . proto=tcp . spt=56341 . dpt=25 . NFTABLES . ... show more Found Mcafee IP Poor Reputation Blocklist . proto=tcp . spt=56341 . dpt=25 . NFTABLES . (CCXLV) show less	Email Spam
🇨🇭 Origon	2026-06-15 04:20:34 (1 month ago)	NOQUEUE - IP: 203.189.137.208 - Jun 15 06:20:34 plesk postfix/smtpd[1075248]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 203.189.137.208 - Jun 15 06:20:34 plesk postfix/smtpd[1075248]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using dnsbl-1.uceprotect.net; IP 203.189.137.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=203.189.137.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> show less	Email Spam
🇨🇭 Origon	2026-05-30 13:36:10 (1 month ago)	NOQUEUE - IP: 203.189.137.208 - May 30 15:36:10 plesk postfix/smtpd[2747977]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 203.189.137.208 - May 30 15:36:10 plesk postfix/smtpd[2747977]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using dnsbl-1.uceprotect.net; IP 203.189.137.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=203.189.137.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> show less	Email Spam
🇩🇪 Viveronese	2026-05-30 09:28:06 (1 month ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-27 12:40:43 (1 month ago)	NOQUEUE - IP: 203.189.137.208 - May 27 14:40:43 plesk postfix/smtpd[980923]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 203.189.137.208 - May 27 14:40:43 plesk postfix/smtpd[980923]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using dnsbl-1.uceprotect.net; IP 203.189.137.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=203.189.137.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> show less	Email Spam
🇬🇧 PeravixGroup	2026-05-17 00:36:38 (2 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇸🇰 KZP	2026-05-16 20:00:36 (2 months ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
🇨🇭 Origon	2026-04-29 16:02:33 (2 months ago)	NOQUEUE - IP: 203.189.137.208 - Apr 29 18:02:33 plesk postfix/smtpd[2967253]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 203.189.137.208 - Apr 29 18:02:33 plesk postfix/smtpd[2967253]: NOQUEUE: reject: RCPT from unknown[203.189.137.208]: 554 5.7.1 Service unavailable; Client host [203.189.137.208] blocked using dnsbl-1.uceprotect.net; IP 203.189.137.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=203.189.137.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<mydsl128-137-208.online.com.kh> show less	Email Spam

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇰🇷 144.24.72.208

🇯🇵 103.85.231.219

🇳🇱 91.92.42.64

🇲🇦 81.192.46.36

🇺🇸 162.216.149.168

🇨🇳 39.149.34.206

🇺🇸 2602:80d:1008::8a

🇨🇳 218.25.94.199

🇺🇸 205.210.31.106

🇧🇷 177.128.224.122

🇺🇸 169.150.203.24

🇧🇷 167.250.160.139

🇨🇳 120.198.138.185

🇨🇳 117.11.88.221

🇨🇳 116.172.249.25

🇻🇳 113.164.66.10

🇱🇹 77.90.185.16

🇺🇸 74.82.47.3

🇺🇸 64.62.197.113