42.48.38.85

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
129 reports
42 reporters · latest 5 months ago
ISP
China Unicom HuNan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Changsha, Hunan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

42.48.38.85 has been reported 129 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
129 from 42 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs identified 42.48.38.85 as a malicious indicator from threat intelligence.
DDoS Attack Hacking Exploited Host
🇺🇸 MPL
tcp/8100
Port Scan
🇺🇸 MPL
tcp/18089 (2 or more attempts)
Port Scan
🇧🇾 StatsMe
2026-05-26T12:55:40.327528+0300 ET SCAN NMAP -sS window 1024
Port Scan
🇺🇸 MPL
tcp/10801
Port Scan
🇲🇹 neilcaruana
Sentinel detected an attack on port [2694]
Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 MPL
tcp/1418
Port Scan
🇫🇮 6kilowatti
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 42.48.38.85 to port 25333 [SYD]
Port Scan
🇦🇺 trentwiles.com
Unauthorized connection attempt detected from IP address 42.48.38.85 to port 18016 [SYD]
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: LDAP injection / directory service abuse attempt on port 1883. Severity: MEDIUM. Aaran.cloud
Web App Attack
🇺🇸 MPL
tcp/4343 (2 or more attempts)
Port Scan
🇩🇪 webanyone
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.66
🇧🇷 170.246.82.99
🇵🇱 87.251.64.132
🇳🇱 77.239.124.152
🇷🇺 46.162.36.59
🇧🇷 45.172.207.74
🇳🇱 45.115.26.110
🇫🇮 147.185.133.173
🇩🇪 91.59.9.53
🇳🇱 77.239.124.69
🇷🇺 46.73.159.33
🇳🇱 45.148.10.141
🇸🇬 34.143.180.233
🇰🇷 211.254.212.59
🇺🇸 205.210.31.83
🇺🇸 158.94.187.107
🇳🇬 129.205.96.74
🇲🇾 123.253.33.161
🇨🇳 111.231.77.74
🇭🇰 104.208.108.166
feedback