103.197.242.106

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
34 reports
24 reporters · latest 20 hours ago
ISP
Cogetel Ltd, Online ISP, Cambodia
Usage Type
Fixed Line ISP
ASN
AS23673
Domain Name
cogetel.com.kh
Country
🇰🇭 Cambodia
City
Phnom Penh, Phnom Penh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇳🇱 Netherlands 5 🇵🇱 Poland 2
Most common categories DDoS Attack 12 Web App Attack 7 Brute-Force 5 Port Scan 4 Web Spam 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 KevinNeale
Fail2Ban recidive block for repeated malicious authentication attempts.
Web App Attack
🇿🇦 frontosa
Brute-Force
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)
DDoS Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (safari-macos-invalid-os-token)
DDoS Attack
🇩🇪 LRob
SMTP AUTH probe
Port Scan
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-003.mach3builders.nl
Port Scan Hacking
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇺🇸 nowyouknow
Phishing Web Spam
🇸🇮 administrator
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
🇩🇪 numberstorm
Port Scan Hacking Brute-Force IoT Targeted
🇬🇧 Silly Development
Malicious activity detected from 23673 Cogetel Online, Cambodia, ISP towards host sillydev.co.uk (GET HTTP/2) @ 2026-10-04T21:51:20Z (1 occurrences)
DDoS Attack Exploited Host
🇳🇱 ByeByte API
byebyte.space auth: L7 flood: >=30 nginx-429 rejects in 60s window at 2026-09-30T15:55:20Z
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 188.168.26.253
🇸🇬 168.144.107.169
🇮🇹 89.39.201.95
🇺🇸 45.80.107.37
🇧🇷 200.207.64.183
🇪🇨 181.188.237.209
🇰🇷 169.211.212.42
🇺🇸 138.68.16.163
🇩🇪 64.226.77.234
🇵🇱 45.158.110.79
🇧🇪 34.79.135.70
🇺🇸 31.134.15.111
🇷🇺 5.128.121.101
🇺🇸 154.16.115.99
🇫🇷 91.231.89.234
🇺🇸 38.110.46.211
🇦🇿 37.114.182.98
🇲🇾 14.192.214.169
🇨🇭 209.99.190.186
feedback