JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

58.48.52.242

Neutral Activity

Abuse confidence score ?

0% Low Risk

35 reports

24 reporters · latest 1 year ago

ISP	CHINANET Hubei province network
Usage Type	Fixed Line ISP
ASN	AS137266
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Wuhan, Hubei

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

58.48.52.242 has been reported 35 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 58.48.52.242

This IP address has been reported a total of 35 times from 24 distinct sources. 58.48.52.242 was first reported on December 17th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2024-10-02 00:33:46 (1 year ago)	Persistent port scanning or vulnerability scanning	Port Scan Brute-Force
🇪🇸 saima	2024-09-24 00:00:05 (1 year ago)	Detected 1457 times. SSH Brute-Force from address 58.48.52.242	Brute-Force SSH
🇩🇪 ps-center	2024-09-23 08:30:42 (1 year ago)	SS5-W: Brutforce ssh Login	Brute-Force
🇨🇦 PulseServers	2024-09-23 00:17:42 (1 year ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - VPS CP ...	Brute-Force SSH
🇳🇱 web-hosting.pl	2024-08-24 09:03:08 (2 years ago)	(sshd) Failed SSH login from 58.48.52.242 (CN/China/-): 5 in the last 3600 secs	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-08-18 20:55:31 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 Swiptly	2024-08-17 07:07:18 (2 years ago)	2024-08-17T08:04:48.632464host.enerserver.co.uk sshd[12954]: pam_unix(sshd:auth): authentication fai ... show more 2024-08-17T08:04:48.632464host.enerserver.co.uk sshd[12954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 2024-08-17T08:04:50.687957host.enerserver.co.uk sshd[12954]: Failed password for invalid user audit from 58.48.52.242 port 59544 ssh2 2024-08-17T08:07:13.489382host.enerserver.co.uk sshd[13505]: Invalid user git from 58.48.52.242 port 41646 2024-08-17T08:07:13.809087host.enerserver.co.uk sshd[13505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 2024-08-17T08:07:16.436066host.enerserver.co.uk sshd[13505]: Failed password for invalid user git from 58.48.52.242 port 41646 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2024-08-17 00:21:13 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇩🇪 ps-center	2024-08-17 00:00:46 (2 years ago)	DIS: Brutforce ssh Login	Brute-Force
🇺🇸 chronos	2024-08-15 10:08:52 (2 years ago)	[AUTORAVALT][[15/08/2024 - 07:08:52 -03:00 UTC] Attack from [Chinanet Hostmaster] [58.48.52.242]-[RA ... show more [AUTORAVALT][[15/08/2024 - 07:08:52 -03:00 UTC] Attack from [Chinanet Hostmaster] [58.48.52.242]-[RANGE:58.48.0.0 - 58.55.255.255] Action: BLocKed Hacking... Unauthorized attempts to access the server. Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc. SSH -> Secure Shell (SSH) abuse. ] ... show less	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2024-08-02 02:50:02 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 jlgtx	2024-08-02 02:44:18 (2 years ago)	2024-08-01 21:44:10.479229-0500 localhost sshd\[64616\]: Failed password for root from 58.48.52.242 ... show more 2024-08-01 21:44:10.479229-0500 localhost sshd\[64616\]: Failed password for root from 58.48.52.242 port 33178 ssh2 2024-08-01 21:44:12.159232-0500 localhost sshd\[64617\]: Failed password for root from 58.48.52.242 port 45232 ssh2 2024-08-01 21:44:13.429134-0500 localhost sshd\[64621\]: Failed password for root from 58.48.52.242 port 50548 ssh2 2024-08-01 21:44:13.866825-0500 localhost sshd\[64627\]: Failed password for root from 58.48.52.242 port 33188 ssh2 ... show less	Brute-Force SSH
🇬🇧 Swiptly	2024-08-01 20:52:22 (2 years ago)	2024-08-01T21:50:37.043313host.enerserver.co.uk sshd[1721]: pam_unix(sshd:auth): authentication fail ... show more 2024-08-01T21:50:37.043313host.enerserver.co.uk sshd[1721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 user=root 2024-08-01T21:50:39.398028host.enerserver.co.uk sshd[1721]: Failed password for root from 58.48.52.242 port 45334 ssh2 2024-08-01T21:50:37.567752host.enerserver.co.uk sshd[1723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 user=root 2024-08-01T21:50:40.062514host.enerserver.co.uk sshd[1723]: Failed password for root from 58.48.52.242 port 45350 ssh2 2024-08-01T21:52:21.109168host.enerserver.co.uk sshd[1766]: Invalid user cm from 58.48.52.242 port 52140 ... show less	Brute-Force SSH
🇫🇷 EggEek	2024-08-01 13:15:48 (2 years ago)	Aug 1 13:13:42 hyperion sshd[592422]: Failed password for invalid user postfix from 58.48.52.242 po ... show more Aug 1 13:13:42 hyperion sshd[592422]: Failed password for invalid user postfix from 58.48.52.242 port 44840 ssh2 Aug 1 13:15:44 hyperion sshd[592579]: Connection from 58.48.52.242 port 55248 on 91.121.149.190 port 1122 rdomain "" Aug 1 13:15:45 hyperion sshd[592579]: Invalid user ftpuser from 58.48.52.242 port 55248 Aug 1 13:15:45 hyperion sshd[592579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 Aug 1 13:15:47 hyperion sshd[592579]: Failed password for invalid user ftpuser from 58.48.52.242 port 55248 ssh2 ... show less	Brute-Force SSH
🇫🇷 elf	2024-08-01 13:13:27 (2 years ago)	[Fail2Ban]: Jail sshd triggered 5 time(s) for 58.48.52.242. 2024-08-01T15:10:16.530883+02:00 - sshd[ ... show more [Fail2Ban]: Jail sshd triggered 5 time(s) for 58.48.52.242. 2024-08-01T15:10:16.530883+02:00 - sshd[1000966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 2024-08-01T15:10:18.140236+02:00 - sshd[1000966]: Failed password for invalid user git from 58.48.52.242 port 36264 ssh2 2024-08-01T15:13:24.049401+02:00 - sshd[1001274]: Invalid user postfix from 58.48.52.242 port 35892 2024-08-01T15:13:24.336810+02:00 - sshd[1001274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.48.52.242 2024-08-01T15:13:26.420814+02:00 - sshd[1001274]: Failed password for invalid user postfix from 58.48.52.242 port 35892 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.0.8.165

🇨🇳 120.48.22.219

🇨🇳 116.237.200.143

🇺🇸 104.28.245.40

🇲🇾 103.12.154.241

🇮🇷 79.175.149.218

🇨🇳 43.143.18.14

🇺🇸 18.188.225.165

🇨🇳 1.58.207.214

🇸🇬 193.37.32.206

🇹🇭 165.154.120.13

🇫🇷 129.151.238.160

🇨🇳 117.85.117.67

🇺🇸 104.28.233.73

🇨🇳 94.231.206.255

🇺🇸 91.230.168.130

🇳🇱 85.11.167.7

🇺🇸 66.132.195.88

🇺🇸 45.146.55.76

🇹🇼 198.235.24.73