42.48.38.76
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom HuNan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- ๐จ๐ณ China
- City
- Changsha, Hunan
No reports in the last 60 days
42.48.38.76 has been reported 131 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
131 from
43 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ง๐ท ICS Labs |
ICS Labs identified 42.48.38.76 as a malicious indicator from threat intelligence.
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host | |
| ๐ฎ๐ณ evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=3)
|
Hacking Brute-Force SSH | |
| ๐ธ๐ช donarev419 |
Connection to port 9229 with data transfer.
Data preview: ๏ฟฝ
|
Port Scan Hacking | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
|
FTP Brute-Force Brute-Force | |
| ๐บ๐ธ MPL |
tcp/6667 (2 or more attempts)
|
Port Scan | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| ๐ฌ๐ง sonot |
Blocked by UFW on tunneluk01 [8887/tcp]
Source port: 17093
TTL: 237
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Hacking | |
| Anonymous |
Firewall - Suricata IDS [Priority 2 - High]: ET CINS Active Threat Intelligence Poor Reputation IP group 53
|
Port Scan Hacking | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud
|
DDoS Attack Hacking | |
| ๐บ๐ธ MPL |
tcp/8089
|
Port Scan | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
|
FTP Brute-Force Brute-Force | |
| ๐ฉ๐ช dispaisyenterprises |
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 2378
GET /
Accept: */*; 2378 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| ๐ฌ๐ง PeravixGroup |
Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aaran.cloud
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown