42.48.38.166
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom HuNan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Changsha, Hunan
No reports in the last 60 days
42.48.38.166 has been reported 122 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
122 from
50 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: Unauthorized traffic (16 bytes of payload); 1087 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/10022 (2 or more attempts)
|
Port Scan | |
| 🇳🇱 COMPLEX |
Unsolicited TCP traffic | Action: DROP | Port 10000
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/16000
|
Port Scan | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 42.48.38.166 to port 26256 [SYD]
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 18886 [1] TCP
|
Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking | |
| 🇺🇸 MPL |
tcp/110
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Hacking | |
| 🇫🇮 percocet |
Cloudflare blocked 1 requests (HTTP 403) in 1h. Country: CN
|
DDoS Attack Web App Attack | |
| 🇺🇸 MPL |
tcp/2333
|
Port Scan | |
| 🇸🇪 SkyDancer |
Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).
|
Hacking Brute-Force | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown