42.48.38.252 has a low threat confidence level of 19%, originating from Changsha, China, on the CHINA UNICOM China169 Backbone network (4837). It has been observed across 3 sessions targeting SSH, MONGODB, POSTGRES, First observed on February 15, 2026, most recently active March 5, 2026.