42.48.38.115

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
126 reports
48 reporters · latest 3 months ago
ISP
China Unicom HuNan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Changsha, Hunan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

42.48.38.115 has been reported 126 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
126 from 48 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=98, sources=1)
Hacking Brute-Force SSH
🇧🇷 ICS Labs
ICS Labs identified 42.48.38.115 as a malicious indicator from threat intelligence.
DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
Brute-Force Hacking
🇬🇧 PeravixGroup
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:19684 dst:3306
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Severity: MEDIUM. Aaran.cloud
Brute-Force Hacking
🇬🇧 PeravixGroup
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10390 [1] TCP
Port Scan
🇺🇸 MPL
tcp/8883 (2 or more attempts)
Port Scan
🇳🇱 DonAtari
DShield firewall scan - TCP to port 3307
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 180.184.71.166
🇨🇦 172.70.80.29
🇩🇪 109.160.32.150
🇺🇸 104.248.225.73
🇺🇸 72.253.251.7
🇰🇷 211.206.124.40
🇺🇸 203.100.222.8
🇫🇷 185.194.178.68
🇸🇬 168.144.250.114
🇫🇮 147.185.133.219
🇨🇳 139.213.206.5
🇺🇸 72.253.251.3
🇺🇸 45.156.129.121
🇳🇱 45.148.10.151
🇬🇧 5.226.140.99
🇬🇧 216.226.76.20
🇫🇮 216.40.75.196
🇳🇱 213.209.159.238
🇺🇸 185.61.220.231
🇳🇱 172.94.9.55
feedback