42.238.139.238

No. 42.238.139.238 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.

FFraud scores 42.238.139.238 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Actively distributing malware payloads to compromised systems. Identified as part of a botnet network. IoT botnet node (Mirai/Mozi family) actively scanning for vulnerable devices. Performing SSH brute force attacks against servers. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

42.238.139.238 is operated by CHINA UNICOM China169 Backbone (AS4837), located in China.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Actively distributing malware payloads to compromised systems. Identified as part of a botnet network. IoT botnet node (Mirai/Mozi family) actively scanning for vulnerable devices. Performing SSH brute force attacks against servers. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.