AbuseIPDB » 42.5.249.188

42.5.249.188 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 65%: ?

65%

ISP	UNICOM Liaoning Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 42.5.249.188

Whois 42.5.249.188

IP Abuse Reports for 42.5.249.188:

This IP address has been reported a total of 120 times from 42 distinct sources. 42.5.249.188 was first reported on March 3rd 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-02-25 01:51:54 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/42.5.249.188	SSH
RAP	2025-02-24 17:50:20 (1 month ago)	2025-02-24 17:50:20 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
webnestify	2025-02-24 16:30:00 (1 month ago)	[Webnestify Honeypot - China] Unauthorized connection attempt on port 23.	Port Scan Hacking Brute-Force
Pingger Shikkoken	2025-02-24 13:22:12 (1 month ago)	2025-02-24T13:22:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more2025-02-24T13:22:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=42.5.249.188 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=41474 DF PROTO=TCP SPT=57600 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 2025-02-24T13:22:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=42.5.249.188 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=41475 DF PROTO=TCP SPT=57600 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force
RAP	2025-02-24 06:31:36 (1 month ago)	2025-02-24 06:31:36 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
rtbh.com.tr	2025-02-24 04:49:31 (1 month ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
security.rdmc.fr	2025-02-24 02:49:09 (1 month ago)	Port Scan Attack proto:TCP src:34953 dst:23	Port Scan
rtbh.com.tr	2025-02-24 00:49:32 (1 month ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
rtbh.com.tr	2025-02-23 20:49:33 (1 month ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
Anonymous	2025-02-23 10:49:34 (1 month ago)	Drop from IP address 42.5.249.188 to tcp-port 23	Port Scan
RAP	2025-02-23 06:18:09 (1 month ago)	2025-02-23 06:18:09 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
ps-center	2025-02-23 05:53:05 (1 month ago)	C1-W: TCP-Scanner. Port: 23	Port Scan
MPL	2025-02-22 13:44:22 (1 month ago)	tcp/23 (2 or more attempts)	Port Scan
MPL	2025-02-22 13:44:22 (1 month ago)	tcp/23 (4 or more attempts)	Port Scan
rtbh.com.tr	2025-02-22 12:49:34 (1 month ago)	list.rtbh.com.tr report: tcp/23	Brute-Force