42.48.38.185

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
127 reports
52 reporters · latest 5 months ago
ISP
China Unicom HuNan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Changsha, Hunan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

42.48.38.185 has been reported 127 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
127 from 52 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 StopAbuse
tcp/5000
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud
Brute-Force
🇵🇱 sefinek.net
Honeypot hit: Empty payload (likely service probe); 3052 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 MPL
tcp/10255
Port Scan
🇩🇪 wlt-blocker
Illegal port scans
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 42.48.38.185 to port 3023 [SYD]
Port Scan
🇲🇹 neilcaruana
Sentinel detected an attack on port [5222]
Hacking
🇬🇧 PeravixGroup
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
Anonymous
Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DShield).
Port Scan Hacking Bad Web Bot
🇺🇸 MPL
tcp/9000
Port Scan
🇺🇸 chronos
Brute-Force Email Spam Spoofing Phishing Hacking
🇩🇪 HoneyPot-FrPri
1778992120 - 05/17/2026 06:28:40 Host: 42.48.38.185/42.48.38.185 Port: 6667 TCP Blocked ...
Port Scan
🇺🇸 chronos
Brute-Force Email Spam Spoofing Phishing Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 114.246.241.87
🇳🇱 216.203.20.227
🇲🇿 196.3.99.226
🇺🇸 188.213.202.129
🇵🇱 172.64.200.193
🇺🇸 142.93.16.100
🇺🇸 64.49.36.179
🇰🇿 45.255.125.63
🇳🇱 213.209.159.26
🇺🇸 173.239.240.56
🇺🇸 173.239.240.45
🇺🇸 173.239.240.36
🇧🇷 170.231.4.227
🇷🇺 146.158.98.192
🇸🇾 128.0.7.130
🇨🇦 20.200.64.201
🇬🇧 185.247.137.30
🇺🇸 165.227.16.226
🇺🇸 159.89.151.250
🇩🇪 69.5.169.65
feedback