JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.96.11.181

42.96.11.181 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	VIETSERVER SERVICES TECHNOLOGY COMPANY LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63737
Domain Name	vietserver.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.96.11.181

Whois 42.96.11.181

IP Abuse Reports for 42.96.11.181:

This IP address has been reported a total of 39 times from 37 distinct sources. 42.96.11.181 was first reported on July 7th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-11 09:57:18 (1 hour ago)	Fail2ban Nginx log integration.	Brute-Force SSH Port Scan
🇩🇪 femboy.cat	2026-07-11 09:53:53 (1 hour ago)	Port scan to tcp/6106 from 42.96.11.181	Brute-Force
🇭🇰 www.winos.me	2026-07-11 09:18:49 (1 hour ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇮🇳 nadnitin	2026-07-11 08:13:32 (2 hours ago)	Automated trigger via Nginx Police. Reason: MALICIOUS-HEX	Web App Attack
🇦🇺 LiftUp Hosting	2026-07-11 08:03:02 (3 hours ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 8888 [3], 6108 [3], 12019 [3], 1194 [3], 12 ... show more Honeypot hit: Unauthorized traffic (3 bytes of payload); 8888 [3], 6108 [3], 12019 [3], 1194 [3], 12032 [3], 10803 [3] TCP show less	Port Scan
🇺🇸 sandra361	2026-07-11 07:53:44 (3 hours ago)	Port scan detected: 45 attempts across 45 ports (1083,1084,1194,3127,5566, ..., 30128,50000,51234). ... show more Port scan detected: 45 attempts across 45 ports (1083,1084,1194,3127,5566, ..., 30128,50000,51234). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=42.96.11.181 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=11727 DF PROTO=TCP SPT=47603 DPT=1083 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇰🇷 SentinalX by uzumaru	2026-07-11 07:53:21 (3 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 1.1.1.1:80 show less	Open Proxy Port Scan
🇧🇷 diego	2026-07-11 05:59:30 (5 hours ago)	[rede-arem1] Port Scan detected from 42.96.11.181 (VN/Vietnam/-). 11 hits in the last 235 seconds; ... show more [rede-arem1] Port Scan detected from 42.96.11.181 (VN/Vietnam/-). 11 hits in the last 235 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 11 02:59:16 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=42.96.11.181 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=28798 DF PROTO=TCP SPT=27031 DPT=30128 WINDOW=64464 RES=0x00 SYN URGP=0 Jul 11 02:59:16 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=42.96.11.181 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=43035 DF PROTO=TCP SPT=37134 DPT=9050 WINDOW=64471 RES=0x00 SYN UR show less	Port Scan
🇫🇷 Hostynet	2026-07-10 21:18:14 (13 hours ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇺🇸 xmission.com	2026-07-10 16:47:33 (18 hours ago)	Blocked by UFW (TCP on 22134) Source port: 50364 TTL: 51 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 22134) Source port: 50364 TTL: 51 Packet length: 40 TOS: 0x08 This report (for 42.96.11.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-10 10:04:30 (1 day ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-open-proxy; Action=ban; Events=1; ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-open-proxy; Action=ban; Events=1; Hosts=1.1.1.1:80; Paths=1.1.1.1:80; Country=VN; ASN=63737 VIETSERVER SERVICES TECHNOLOGY COMPANY LIMITED show less	Open Proxy
🇭🇰 demonsword	2026-07-10 09:58:37 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 1.1.1.1:80 show less	Open Proxy Port Scan
🇺🇸 MPL	2026-07-10 09:38:43 (1 day ago)	tcp port scan (1155 or more attempts)	Port Scan
🇧🇷 RafaLeardi	2026-07-10 09:00:00 (1 day ago)	Leardi-Servers Firewall: M(250.0.1) Port_Scanner	Port Scan
🇬🇧 openstrike.co.uk	2026-07-10 07:06:54 (1 day ago)	120 packets to ports 80 443 808 999 1080 1081 1082 1083 1084 1085 1088 1111 1194 3125 3127 3128 3129 ... show more 120 packets to ports 80 443 808 999 1080 1081 1082 1083 1084 1085 1088 1111 1194 3125 3127 3128 3129 3130 4145 4153 5566 5678 6101 6104 6106 6108 6109 6110 6121 6122 6130 6666 6969 7302 7777 7890 7891 8001 8010 8011 8081 8082 8083 8084 8085 8086 8087 8089 8090, etc. show less	Port Scan

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇮🇳 103.93.105.149

🇬🇧 35.203.211.19

🇧🇬 78.128.114.174

🇧🇪 34.22.165.36

🇺🇸 20.245.71.147

🇰🇷 222.119.70.222

🇧🇷 205.210.31.231

🇺🇸 162.241.33.238

🇺🇸 135.237.126.217

🇨🇱 2800:3f0:4003:c08::120

🇻🇳 171.231.192.229

🇸🇬 139.162.31.82

🇨🇳 117.161.79.108

🇺🇸 91.230.168.52

🇷🇴 80.94.95.211

🇦🇿 37.114.148.240

🇺🇸 23.239.187.69

🇺🇸 205.210.31.55

🇪🇬 197.39.208.187