202.62.42.167

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
41% Elevated
130 reports
66 reporters · latest 1 day ago
ISP
Cogetel Ltd, Online ISP, Cambodia
Usage Type
Fixed Line ISP
ASN
AS23673
Domain Name
cogetel.com.kh
Country
🇰🇭 Cambodia
City
Phnom Penh, Phnom Penh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
130 from 66 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇮🇩 Indonesia 2
Most common categories DDoS Attack 9 Web App Attack 4 Exploited Host 3 Hacking 3 Brute-Force 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (ua-concentration)
Bad Web Bot
🇹🇼 tyetriiix
Wazuh Alert Evidence: Nov 07 14:33:04 ms1.triiix.info postfix/submission/smtpd[967034]: warning: hostname cogetel-167-42-62-202.online.com.kh does not resolve to address 202.62.42.167: Name or service not known
Hacking
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇬🇧 Silly Development
Malicious activity detected from 23673 Cogetel Online, Cambodia, ISP towards host sillydev.co.uk (GET HTTP/2) @ 2026-11-03T21:27:31Z (2 occurrences)
DDoS Attack Exploited Host
🇩🇪 GunsawianHosting
Open public proxy/relay
Open Proxy VPN IP Exploited Host
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web App Attack
🇺🇸 xmission.com
202.62.42.167 - - [12/Oct/2026:02:21:29 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ...
Web App Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
🇩🇪 edgeshield
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
🇩🇪 Packets-Decreaser.NET
Incoming Layer 7 Flood Detected
DDoS Attack Web Spam
🇮🇳 Parth Maniar
This IP address carried out 4 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
Anonymous
202.62.42.167 (KH/Cambodia/cogetel-167-42-62-202.online.com.kh), 10 distributed imapd attacks on account [redacted]
Brute-Force
🇮🇩 sockominfo
Hacking Web App Attack
🇮🇩 sockominfo
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69
🇭🇰 156.225.1.94
🇺🇸 66.132.186.211
🇮🇳 45.112.50.36
🇷🇺 37.29.38.228
🇺🇸 20.83.36.75
🇺🇸 216.25.90.28
🇧🇷 205.210.31.235
🇦🇷 201.177.92.92
🇬🇧 201.25.175.206
🇺🇸 185.8.106.193
🇽🇰 178.175.74.91
🇺🇸 162.216.149.221
🇭🇰 154.92.17.128
🇺🇸 152.163.16.243
🇺🇸 144.172.115.103
🇧🇬 80.66.66.31
🇺🇸 74.0.179.208
🇺🇸 65.49.1.212
🇺🇸 65.49.1.176
feedback