JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.52.166.188

42.52.166.188 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 19%: ?

19%

ISP	UNICOM Liaoning Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.52.166.188

Whois 42.52.166.188

IP Abuse Reports for 42.52.166.188:

This IP address has been reported a total of 6 times from 5 distinct sources. 42.52.166.188 was first reported on June 16th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ByeByte API	2026-09-22 02:57:52 (1 week ago)	byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-09-22T02:57:52Z. Source port 60336. TCP ... show more byebyte.space auth: TCP packet to port 1433 (MSSQL) at 2026-09-22T02:57:52Z. Source port 60336. TCP flags: SYN. Packet: 52B, TTL 109, window 8192, IP id 145. Single packet, dropped at firewall. p0f: OS Windows 7 or 8 (exact match), 19 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-09-22 02:57:52 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 1433. Single burst at 2026-09-22 02:57 UTC. show less	Port Scan
🇩🇪 reznekcs	2026-09-19 05:02:30 (1 week ago)	Blocked by UFW firewall	Brute-Force
🇹🇼 kk_it_man	2026-09-18 02:53:08 (1 week ago)	ET SCAN Suspicious inbound to MSSQL port 1433	Port Scan
Anonymous	2024-09-01 12:07:00 (2 years ago)	Brute-Force SSH	Brute-Force SSH
🇺🇸 bigscoots.com	2024-06-16 00:12:39 (2 years ago)	(sshd) Failed SSH login from 42.52.166.188 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 42.52.166.188 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 15 19:12:12 9228 sshd[11685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.52.166.188 user=root Jun 15 19:12:14 9228 sshd[11685]: Failed password for root from 42.52.166.188 port 36316 ssh2 Jun 15 19:12:16 9228 sshd[11703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.52.166.188 user=root Jun 15 19:12:17 9228 sshd[11703]: Failed password for root from 42.52.166.188 port 37482 ssh2 Jun 15 19:12:19 9228 sshd[11712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.52.166.188 user=root show less	Brute-Force SSH

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.70

🇰🇷 112.162.111.205

🇧🇬 79.124.62.230

🇫🇷 51.75.19.210

🇬🇧 193.163.125.241

🇺🇸 172.59.105.189

🇺🇸 162.158.154.254

🇨🇦 149.56.141.16

🇩🇪 130.12.182.188

🇨🇳 101.96.209.234

🇩🇪 94.130.38.158

🇷🇴 92.118.39.49

🇫🇷 89.92.69.120

🇧🇦 77.221.0.72

🇳🇱 77.170.205.162

🇺🇸 47.145.17.101

🇺🇸 45.79.132.41

🇺🇸 2a03:2880:f806:18::

🇨🇱 200.126.105.149

🇰🇿 185.206.32.100