JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.95.96.242

23.95.96.242 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 62%: ?

62%

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	23-95-96-242-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.95.96.242

Whois 23.95.96.242

IP Abuse Reports for 23.95.96.242:

This IP address has been reported a total of 48 times from 40 distinct sources. 23.95.96.242 was first reported on March 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-18 17:02:28 (1 day ago)	attempted attached to my private listening port	Port Scan
🇭🇰 David Shafer	2026-07-18 01:03:47 (2 days ago)	Honeypot hit: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 1 ... show more Honeypot hit: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 18080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-07-17 23:21:48 (2 days ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 18080 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-07-16 19:30:11 (3 days ago)	1784230211 - 07/16/2026 21:30:11 Host: 23.95.96.242/23.95.96.242 Port: 808 TCP Blocked ...	Port Scan
🇫🇮 6kilowatti	2026-07-16 08:37:57 (4 days ago)	2026-07-16T11:37:56.867652+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-16T11:37:56.867652+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=23.95.96.242 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=47477 PROTO=TCP SPT=50606 DPT=808 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 Tanados	2026-07-15 22:18:47 (4 days ago)	Blocked by UFW [808/tcp] Source port: 53873 TTL: 235 Packet length: 40 TOS: 0x08 This report was ge ... show more Blocked by UFW [808/tcp] Source port: 53873 TTL: 235 Packet length: 40 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-06 21:37:52 (1 week ago)	attempted attached to my private listening port	Port Scan
Anonymous	2026-06-28 21:26:01 (3 weeks ago)	Jun 28 17:16:53 localhost kernel: [111026678.247761] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 28 17:16:53 localhost kernel: [111026678.247761] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.95.96.242 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57759 PROTO=TCP SPT=41313 DPT=808 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 28 17:16:53 localhost kernel: [111026678.247788] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.95.96.242 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57759 PROTO=TCP SPT=41313 DPT=808 SEQ=3616178889 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 28 17:26:00 localhost kernel: [111027225.170389] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.95.96.242 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=62157 PROTO=TCP SPT=41313 DPT=18080 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 28 17:26:00 localhost kernel: [111027225.170419] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=23.95.96.242 DST=[mungedIP2] LEN=40 TOS=0x00 P show less	Port Scan
🇳🇱 ByeByte API	2026-06-28 16:35:57 (3 weeks ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 18080, 808. Activity wind ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 18080, 808. Activity window: 2026-06-28 16:31 UTC to 2026-06-28 16:35 UTC. show less	Port Scan
🇳🇱 VMHeaven.io	2026-06-28 16:31:37 (3 weeks ago)	Blocked by UFW [808/tcp] Source port: 44183 TTL: 244 Packet length: 40	Port Scan
🇩🇪 iNetWorker	2026-06-21 14:42:10 (4 weeks ago)	trying to access non-authorized port	Port Scan
🇫🇷 wiredalter	2026-06-20 22:33:46 (4 weeks ago)	Blocked by fail2ban on o2VPS [18080/tcp] Source Port: 54703 TTL: 233 Packet Length: 40 TOS: 0x08 An ... show more Blocked by fail2ban on o2VPS [18080/tcp] Source Port: 54703 TTL: 233 Packet Length: 40 TOS: 0x08 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇫🇷 EDSL	2026-06-20 07:30:32 (1 month ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇫🇷 TheHoneyPotter	2026-06-17 05:48:03 (1 month ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-cli ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 18080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-06-16 05:43:29 (1 month ago)	Honeypot hit: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 1 ... show more Honeypot hit: HTTP/1.1 request on 18080 CONNECT www.baidu.com:443 User-Agent: Go-http-client/1.1; 18080 [10] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.202.231.12

🇰🇷 118.37.214.187

🇩🇪 91.107.243.107

🇧🇬 79.124.62.230

🇷🇺 79.120.30.97

🇧🇷 187.17.224.139

🇵🇱 178.43.1.16

🇵🇰 139.135.40.190

🇸🇦 93.112.207.117

🇳🇱 86.54.31.34

🇨🇦 85.217.149.1

🇹🇭 45.194.70.254

🇺🇸 5.181.171.182

🇨🇳 222.176.200.192

🇨🇳 218.9.233.55

🇪🇨 181.188.237.214

🇨🇳 122.96.28.64

🇸🇬 104.248.159.127

🇮🇹 34.154.187.122

🇨🇳 1.24.16.102