JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.96.61.68

42.96.61.68 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 41%: ?

41%

ISP	CMC Telecom Infrastructure Company
Usage Type	Fixed Line ISP
ASN	AS45903
Domain Name	cmctelecom.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.96.61.68

Whois 42.96.61.68

IP Abuse Reports for 42.96.61.68:

This IP address has been reported a total of 77 times from 36 distinct sources. 42.96.61.68 was first reported on March 2nd 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BellFix	2026-05-22 14:11:56 (4 weeks ago)	Fail2ban reported 42.96.61.68 for npm-admin	Web App Attack
Anonymous	2026-05-19 19:16:40 (1 month ago)	Port Scan detected from 42.96.61.68 (VN/Vietnam/-). 5 hits in the last 20 seconds	Brute-Force Port Scan
🇷🇺 BellFix	2026-05-19 15:56:19 (1 month ago)	Fail2ban reported 42.96.61.68 for npm-admin	Web App Attack
🇩🇪 evilrave	2026-05-18 09:23:32 (1 month ago)	42.96.61.68 - - [18/May/2026:09:23:30 +0000] "POST / HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev ... show more 42.96.61.68 - - [18/May/2026:09:23:30 +0000] "POST / HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" 42.96.61.68 - - [18/May/2026:09:23:30 +0000] "POST / HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" 42.96.61.68 - - [18/May/2026:09:23:30 +0000] "POST /chat HTTP/1.1" 308 164 Host="[REDACTED_HOSTNAME].dev" SNI="-" ... show less	Bad Web Bot
🇯🇵 VXG-NET	2026-05-18 08:34:34 (1 month ago)	port=80, indicator_type=code-execution	Hacking
🇫🇷 Dorian GRANDHAY	2026-05-18 03:58:21 (1 month ago)	42.96.61.68 (VN/Vietnam/-), 5 distributed cpanel attacks on account [root] in the last 3600 secs; Po ... show more 42.96.61.68 (VN/Vietnam/-), 5 distributed cpanel attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-18 05:58:19 +0200] info [whostmgrd] 104.45.133.12 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-18 05:16:04 +0200] info [whostmgrd] 42.96.61.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-18 05:22:07 +0200] info [whostmgrd] 42.96.61.68 - root "GET /cpsess0844029304/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-18 05:17:58 +0200] info [whostmgrd] 42.96.61.68 - root "GET /cpsess4688849309/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-18 05:20:32 +0200] info [whostmgrd] 42.96.61.68 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: 104.45.133.12 (US/United States/-) show less	Port Scan
🇬🇧 Aetherweb Ark	2026-05-17 22:59:06 (1 month ago)	Port Scan detected from 42.96.61.68 (VN/Vietnam/-). N in the last X seconds	Port Scan
🇪🇸 masterguru	2026-05-17 01:08:17 (1 month ago)	(cpanel) Failed cPanel login from 42.96.61.68 (VN/Vietnam/-): 5 in the last 3600 secs (0-123)	Hacking
🇺🇸 PlexLads	2026-05-16 12:25:37 (1 month ago)	42.96.61.68 - - [16/May/2026:05:25:35 -0700] "POST / HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT ... show more 42.96.61.68 - - [16/May/2026:05:25:35 -0700] "POST / HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 42.96.61.68 - - [16/May/2026:05:25:36 -0700] "POST /chat HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 42.96.61.68 - - [16/May/2026:05:25:36 -0700] "POST / HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 42.96.61.68 - - [16/May/2026:05:25:36 -0700] "POST / HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" 42.96.61.68 - - [16/May/2026:05:25:36 -0700] "POST / HTTP/1.1" 403 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko ... show less	Hacking Web App Attack
🇳🇱 COMPLEX	2026-05-16 01:00:13 (1 month ago)	Unsolicited TCP traffic \| Action: DROP \| Port 3000	Brute-Force
🇫🇮 as211431.net	2026-05-15 15:26:10 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /chat UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇴 clauss	2026-05-15 02:13:28 (1 month ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇺🇸 kosada.com	2026-05-14 08:57:28 (1 month ago)	Web shell injection:	Web App Attack
🇳🇱 BellFix	2026-05-12 01:13:37 (1 month ago)	Fail2ban reported 42.96.61.68 for npm-admin	Web App Attack
🇬🇧 Aetherweb Ark	2026-05-07 18:20:49 (1 month ago)	Port Scan detected from 42.96.61.68 (VN/Vietnam/-). N in the last X seconds	Port Scan

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 185.164.81.156

🇰🇷 116.123.150.231

🇭🇰 101.36.107.233

🇺🇸 64.227.101.166

🇺🇸 143.42.173.60

🇺🇸 103.203.57.28

🇳🇱 91.92.40.13

🇺🇸 66.132.224.25

🇺🇸 54.198.27.42

🇳🇱 45.142.193.161

🇺🇸 20.9.87.223

🇺🇸 141.11.88.19

🇺🇸 103.234.62.68

🇹🇭 49.0.85.146

🇷🇺 195.239.146.109

🇩🇪 194.88.98.100

🇸🇬 139.162.33.227

🇩🇪 139.19.117.130

🇳🇱 45.142.193.53

🇩🇪 194.88.98.111