42.48.38.112
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom HuNan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Changsha, Hunan
No reports in the last 60 days
42.48.38.112 has been reported 139 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
139 from
52 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=98, sources=3)
|
Hacking Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 3002)
Source port: 16411
TTL: 234
Packet length: 44
TOS: 0x00
This report (for 42.48.38.112) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Coco Bongo |
1779810141 - 05/26/2026 17:42:21 Host: 42.48.38.112/42.48.38.112 Port: 3389 TCP Blocked
...
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud
|
DDoS Attack Hacking | |
| 🇺🇸 MPL |
tcp/10255
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 12219 [1] TCP
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 8842 [1] TCP
|
Port Scan | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 42.48.38.112 to port 18084 [SYD]
|
Port Scan | |
| 🇷🇸 Smel |
MH/MP Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇬🇧 PeravixGroup |
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 42.48.38.112 to port 49673 [SYD]
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: MEDIUM. Aaran.cloud
|
Brute-Force Hacking | |
| 🇺🇸 MPL |
tcp/12141
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| Anonymous |
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown