JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.48.106.16

42.48.106.16 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 85%: ?

85%

ISP	China Unicom HuNan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.48.106.16

Whois 42.48.106.16

IP Abuse Reports for 42.48.106.16:

This IP address has been reported a total of 18 times from 16 distinct sources. 42.48.106.16 was first reported on July 2nd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 hpg	2026-07-07 03:52:01 (4 days ago)	100 invalid SSH login attempts from 42.48.106.16 in the last 2.5 hours	Brute-Force SSH
Anonymous	2026-07-07 03:46:51 (4 days ago)	...	Brute-Force SSH
🇺🇸 LotPhantom	2026-07-07 03:21:47 (4 days ago)	2026-07-07T03:21:46.051300+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-07-07T03:21:46.051300+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=42.48.106.16 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=9730 DF PROTO=TCP SPT=39802 DPT=5901 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-07T03:21:47.109197+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=42.48.106.16 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=9731 DF PROTO=TCP SPT=39802 DPT=5901 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 netup.at	2026-07-07 01:28:47 (4 days ago)	IP 42.48.106.16 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇩🇪 g33k.biz	2026-07-07 01:28:31 (4 days ago)	Jul 7 03:25:49 v22019038103785759 sshd\[29332\]: pam_unix\(sshd:auth\): authentication failure\; lo ... show more Jul 7 03:25:49 v22019038103785759 sshd\[29332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.48.106.16 user=root Jul 7 03:25:51 v22019038103785759 sshd\[29332\]: Failed password for root from 42.48.106.16 port 56604 ssh2 Jul 7 03:27:14 v22019038103785759 sshd\[29425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.48.106.16 user=root Jul 7 03:27:17 v22019038103785759 sshd\[29425\]: Failed password for root from 42.48.106.16 port 57290 ssh2 Jul 7 03:28:29 v22019038103785759 sshd\[29472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.48.106.16 user=root ... show less	Brute-Force SSH
Anonymous	2026-07-06 20:44:22 (4 days ago)	Port Scanner	Port Scan
🇩🇪 ghostwarriors	2026-07-06 09:50:57 (4 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-07-06 02:06:37 (5 days ago)	Jul 6 02:06:15 portainer-be sshd[1591550]: Failed password for root from 42.48.106.16 port 56542 ss ... show more Jul 6 02:06:15 portainer-be sshd[1591550]: Failed password for root from 42.48.106.16 port 56542 ssh2 Jul 6 02:06:14 portainer-be sshd[1591549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.48.106.16 user=root Jul 6 02:06:15 portainer-be sshd[1591549]: Failed password for root from 42.48.106.16 port 56536 ssh2 Jul 6 02:06:34 portainer-be sshd[1592655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.48.106.16 user=root Jul 6 02:06:36 portainer-be sshd[1592655]: Failed password for root from 42.48.106.16 port 44934 ssh2 ... show less	Brute-Force SSH
🇨🇭 TOCE	2026-07-05 18:04:22 (5 days ago)	25 hits seen on 2026-07-05, ports 5901 (VNC) on a honeypot from www.toce.ch	Brute-Force
🇺🇸 xmission.com	2026-07-05 07:37:26 (5 days ago)	Blocked by UFW (TCP on 5901) Source port: 58612 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 5901) Source port: 58612 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 42.48.106.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-04 19:59:01 (6 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-07-03 23:57:24 (1 week ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇺🇸 resolute	2026-07-03 23:54:45 (1 week ago)	Jul 3 18:53:55 debian-gitlab sshd[3777433]: Invalid user pi from 42.48.106.16 port 37742 Jul 3 18: ... show more Jul 3 18:53:55 debian-gitlab sshd[3777433]: Invalid user pi from 42.48.106.16 port 37742 Jul 3 18:54:15 debian-gitlab sshd[3777441]: Invalid user ubuntu from 42.48.106.16 port 53228 Jul 3 18:54:45 debian-gitlab sshd[3777453]: Invalid user admin from 42.48.106.16 port 38530 ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2026-07-03 15:57:36 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 5901 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 5901 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 ghostwarriors	2026-07-03 10:50:41 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.216

🇵🇱 176.53.159.54

🇮🇩 124.40.252.3

🇺🇸 2604:a940:300:5b6:0:12::

🇵🇭 216.247.18.17

🇺🇸 147.185.132.98

🇨🇳 112.94.5.43

🇫🇷 77.141.37.118

🇺🇸 74.7.175.185

🇷🇴 193.32.162.84

🇮🇳 182.19.35.57

🇧🇷 131.196.205.227

🇨🇳 116.179.32.35

🇨🇳 112.91.253.202

🇨🇳 111.225.214.148

🇦🇹 109.70.100.4

🇵🇪 64.76.73.161

🇳🇱 51.158.205.47

🇨🇱 45.225.184.4

🇬🇧 35.203.210.143