42.48.38.36
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom HuNan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- ๐จ๐ณ China
- City
- Changsha, Hunan
No reports in the last 60 days
42.48.38.36 has been reported 138 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
138 from
52 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ฎ๐ณ evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=95, sources=1)
|
Hacking Brute-Force SSH | |
| ๐ง๐ท ICS Labs |
ICS Labs identified 42.48.38.36 as a malicious indicator from threat intelligence.
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host | |
| ๐บ๐ธ donarev419 |
Connection to port 5001 with data transfer.
Data preview: ๏ฟฝ
|
Port Scan Hacking | |
| ๐บ๐ธ Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| ๐ฒ๐น neilcaruana |
Sentinel detected an attack on port [10139]
|
Hacking | |
| ๐บ๐ธ MPL |
tcp/1960
|
Port Scan | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
|
FTP Brute-Force Brute-Force | |
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 18001 [1] TCP
|
Port Scan | |
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 6089 [1] TCP
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 7238)
Source port: 16863
TTL: 240
Packet length: 44
TOS: 0x14
This report (for 42.48.38.36) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ซ๐ท security.rdmc.fr |
Port Scan Attack proto:TCP src:57588 dst:3306
|
Port Scan | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aaran.cloud
|
Brute-Force | |
| ๐ฌ๐ง Stuart Reid |
...
|
SSH | |
| ๐ง๐พ StatsMe |
2026-05-16T03:56:05.657660+0300
ET SCAN NMAP -sS window 1024
|
Port Scan | |
| Anonymous |
Port Scanner
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown