JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

42.248.127.219

Recent Activity

Abuse confidence score ?

100% Critical

71 reports

60 reporters · latest 12 hours ago

ISP	CHINANET Liaoning province network
Usage Type	Mobile ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 42.248.127.219

Export CSV

This IP address has been reported a total of 71 times from 60 distinct sources. 42.248.127.219 was first reported on October 20th 2026, and the most recent report was 12 hours ago. In the last 60 days, the top reporter locations were: Germany with 12 reports; United States of America with 12 reports; France with 11 reports. The most common categories in these recent reports were: SSH 64 times; Brute-Force 63 times; Port Scan 8 times; Hacking 3 times; Web App Attack 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Josh S.	2026-10-27 23:28:03 (12 hours ago)	2026-10-27T23:28:00.013288+00:00 dockage sshd-session[2279881]: Connection closed by authenticating ... show more 2026-10-27T23:28:00.013288+00:00 dockage sshd-session[2279881]: Connection closed by authenticating user root 42.248.127.219 port 55292 [preauth] 2026-10-27T23:28:01.257777+00:00 dockage sshd-session[2280547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-27T23:28:02.689592+00:00 dockage sshd-session[2280547]: Failed password for root from 42.248.127.219 port 34370 ssh2 2026-10-27T23:28:03.087835+00:00 dockage sshd-session[2280547]: Connection closed by authenticating user root 42.248.127.219 port 34370 [preauth] ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-10-27 20:20:29 (15 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Kitki30.com	2026-10-27 17:45:21 (17 hours ago)	Entered SSH Tarpit (endlessh, server 3). Log: 2026-10-27T17:45:21.462Z ACCEPT host=::ffff:42.248.127 ... show more Entered SSH Tarpit (endlessh, server 3). Log: 2026-10-27T17:45:21.462Z ACCEPT host=::ffff:42.248.127.219 port=55750 fd=4 n=1/4096 show less	Brute-Force SSH Port Scan
🇫🇷 Kejult	2026-10-27 17:05:34 (18 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 ... show more Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie. show less	Port Scan
🇩🇪 Sequell.de	2026-10-27 16:51:46 (18 hours ago)	SSH brute-force attempt (Username: root)	Brute-Force SSH
🇩🇪 UtopiaRaid.cc	2026-10-27 07:20:50 (1 day ago)	SSH brute-force: attempted root login with password(s): ---fuck_you----	Brute-Force SSH
🇩🇪 ghostwarriors	2026-10-27 07:20:05 (1 day ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇫🇮 Voluna	2026-10-27 06:43:06 (1 day ago)	2026-10-27T06:43:04.836890+00:00 MailServer-Slave sshd[1353244]: pam_unix(sshd:auth): authentication ... show more 2026-10-27T06:43:04.836890+00:00 MailServer-Slave sshd[1353244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-27T06:43:06.248107+00:00 MailServer-Slave sshd[1353244]: Failed password for root from 42.248.127.219 port 57174 ssh2 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2026-10-27 06:01:19 (1 day ago)	2026-10-27T08:01:14.645221+02:00 ns3124905 sshd-session[2548855]: Failed password for root from 42.2 ... show more 2026-10-27T08:01:14.645221+02:00 ns3124905 sshd-session[2548855]: Failed password for root from 42.248.127.219 port 38960 ssh2 2026-10-27T08:01:17.221974+02:00 ns3124905 sshd-session[2549161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-27T08:01:18.994188+02:00 ns3124905 sshd-session[2549161]: Failed password for root from 42.248.127.219 port 57118 ssh2 ... show less	Brute-Force SSH
🇩🇪 D3vNu11	2026-10-27 04:20:16 (1 day ago)	Level: (LOW): Service Abuse via Cowrie IOC Country: China 3x -> Target Country: Ashburn, USA SSH	Brute-Force SSH
🇫🇷 Kejult	2026-10-27 00:16:12 (1 day ago)	Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ... show more Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed. show less	Hacking SSH
🇩🇪 orges	2026-10-26 21:39:25 (1 day ago)	2026-10-26T22:39:22.515717+01:00 srv01 sshd[1665878]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-10-26T22:39:22.515717+01:00 srv01 sshd[1665878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-26T22:39:24.828075+01:00 srv01 sshd[1665878]: Failed password for root from 42.248.127.219 port 51360 ssh2 ... show less	Brute-Force SSH
🇺🇸 carlos1001	2026-10-26 20:29:09 (1 day ago)	2026-10-26T15:28:45.905920 gateway sshd[1778382]: Failed password for root from 42.248.127.219 port ... show more 2026-10-26T15:28:45.905920 gateway sshd[1778382]: Failed password for root from 42.248.127.219 port 38780 ssh2 2026-10-26T15:28:49.637924 gateway sshd[1778385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-26T15:28:51.831906 gateway sshd[1778385]: Failed password for root from 42.248.127.219 port 49462 ssh2 2026-10-26T15:28:55.940949 gateway sshd[1778390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-26T15:28:58.295050 gateway sshd[1778390]: Failed password for root from 42.248.127.219 port 34132 ssh2 2026-10-26T15:29:01.224569 gateway sshd[1778393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-26T15:29:03.734404 gateway sshd[1778393]: Failed password for root from 42.248.127.219 port 46810 ssh2 2026-10-26T15:29:06.532460 gateway sshd[1778396]: pam_unix(sshd: ... show less	Brute-Force SSH
🇺🇸 mfilser	2026-10-26 19:15:53 (1 day ago)	2026-10-26T20:15:51.379998+01:00 my-vps sshd[256524]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-10-26T20:15:51.379998+01:00 my-vps sshd[256524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-26T20:15:52.887937+01:00 my-vps sshd[256524]: Failed password for root from 42.248.127.219 port 60496 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-10-26 17:08:30 (1 day ago)	2026-10-27T02:08:20.654271+09:00 kabedon sshd[2029566]: Failed password for root from 42.248.127.219 ... show more 2026-10-27T02:08:20.654271+09:00 kabedon sshd[2029566]: Failed password for root from 42.248.127.219 port 51414 ssh2 2026-10-27T02:08:22.023872+09:00 kabedon sshd[2029671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-27T02:08:24.454296+09:00 kabedon sshd[2029671]: Failed password for root from 42.248.127.219 port 57596 ssh2 2026-10-27T02:08:27.918512+09:00 kabedon sshd[2029807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.248.127.219 user=root 2026-10-27T02:08:30.038100+09:00 kabedon sshd[2029807]: Failed password for root from 42.248.127.219 port 40666 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 99.115.52.108

🇨🇳 36.137.180.219

🇹🇷 213.142.159.216

🇦🇷 190.195.168.202

🇺🇸 184.185.30.182

🇺🇸 173.24.91.141

🇺🇸 172.59.209.36

🇺🇸 156.244.152.61

🇷🇴 92.118.39.77

🇺🇸 73.59.129.13

🇸🇬 68.183.181.62

🇸🇪 62.108.201.221

🇺🇸 50.240.2.165

🇵🇭 49.149.198.35

🇳🇱 45.148.10.152

🇫🇷 2a01:cb10:3a3:9a00:7c35:b2aa:6468:afdd

🇺🇸 162.83.119.157

🇹🇭 147.50.231.135

🇹🇼 101.13.5.39

🇺🇸 97.218.31.240