JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.39.45.242

Recent Activity

Abuse confidence score ?

100% Critical

29 reports

29 reporters · latest 3 days ago

ISP	CHINANET Shanxi(SN) province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	xa.sn.cn
Country	🇨🇳 China
City	Xi'an, Shaanxi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 117.39.45.242

Export CSV

This IP address has been reported a total of 29 times from 29 distinct sources. 117.39.45.242 was first reported on March 17th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; France with 6 reports; Finland with 2 reports. The most common categories in these recent reports were: Brute-Force 24 times; SSH 22 times; Port Scan 4 times; Bad Web Bot 1 time; Exploited Host 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 axiomofchoice.xyz	2026-09-30 10:19:34 (3 days ago)	sus activity:Timeout before authentication for connection from 117.39.45.242 to 45.63.98.96, pid = 9 ... show more sus activity:Timeout before authentication for connection from 117.39.45.242 to 45.63.98.96, pid = 91833 show less	Port Scan SSH
Anonymous	2026-09-30 05:51:13 (3 days ago)	ssh bruteforce	Brute-Force SSH
🇨🇳 Bro Charlie	2026-09-30 04:05:38 (3 days ago)	2026-09-30T12:05:35.965236+08:00 localhost sshd[3023341]: Invalid user ubuntu from 117.39.45.242 por ... show more 2026-09-30T12:05:35.965236+08:00 localhost sshd[3023341]: Invalid user ubuntu from 117.39.45.242 port 33190 ... show less	Brute-Force SSH
🇩🇪 NxtGenIT	2026-09-30 03:18:50 (3 days ago)	Cowrie Honeypot hit, Event Type: cowrie.command.failed, Command: Command not found: Enter new UNIX p ... show more Cowrie Honeypot hit, Event Type: cowrie.command.failed, Command: Command not found: Enter new UNIX password: show less	Brute-Force
🇰🇷 windykc	2026-09-30 02:16:14 (3 days ago)	Honeypot capture. SSH: 3 auth attempts, 2 exec, 0 shell, 0 SFTP uploads. Geo/ISP: CN/CHINANET Shanxi ... show more Honeypot capture. SSH: 3 auth attempts, 2 exec, 0 shell, 0 SFTP uploads. Geo/ISP: CN/CHINANET Shanxi(SN) province network. Last seen: 2026-09-29T13:56:21Z. show less	Hacking Brute-Force SSH
🇺🇸 COMPLEX	2026-09-30 00:32:09 (3 days ago)	Banned by Multi Agent · node …whb4 · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇩🇪 CinnamonLambda	2026-09-29 23:34:01 (3 days ago)	2026-09-29T23:32:04.638650+00:00 v7928 sshd-session[71544]: pam_unix(sshd:auth): authentication fail ... show more 2026-09-29T23:32:04.638650+00:00 v7928 sshd-session[71544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.39.45.242 user=root 2026-09-29T23:32:06.730596+00:00 v7928 sshd-session[71544]: Failed password for root from 117.39.45.242 port 31983 ssh2 2026-09-29T23:33:58.129328+00:00 v7928 sshd-session[71611]: Invalid user postgres from 117.39.45.242 port 33361 2026-09-29T23:33:58.131289+00:00 v7928 sshd-session[71611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.39.45.242 2026-09-29T23:34:00.601680+00:00 v7928 sshd-session[71611]: Failed password for invalid user postgres from 117.39.45.242 port 33361 ssh2 ... show less	Brute-Force SSH
🇫🇷 applemooz	2026-09-29 23:13:59 (3 days ago)	Sep 30 01:02:16 lnxmail62 sshd[568179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 30 01:02:16 lnxmail62 sshd[568179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.39.45.242 user=root Sep 30 01:02:18 lnxmail62 sshd[568179]: Failed password for root from 117.39.45.242 port 32642 ssh2 Sep 30 01:13:56 lnxmail62 sshd[573817]: Invalid user robin from 117.39.45.242 port 33023 Sep 30 01:13:56 lnxmail62 sshd[573817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.39.45.242 Sep 30 01:13:58 lnxmail62 sshd[573817]: Failed password for invalid user robin from 117.39.45.242 port 33023 ssh2 ... show less	Brute-Force SSH
🇫🇮 Antti	2026-09-29 20:56:11 (3 days ago)	2026-09-29T20:49:54.898173+00:00 relay-fi05 sshd-session[82494]: User root from 117.39.45.242 not al ... show more 2026-09-29T20:49:54.898173+00:00 relay-fi05 sshd-session[82494]: User root from 117.39.45.242 not allowed because none of user's groups are listed in AllowGroups 2026-09-29T20:54:34.349249+00:00 relay-fi05 sshd-session[82496]: Connection from 117.39.45.242 port 32731 on 87.58.151.218 port 22 rdomain "" 2026-09-29T20:54:39.973072+00:00 relay-fi05 sshd-session[82496]: Invalid user game from 117.39.45.242 port 32731 2026-09-29T20:56:07.764595+00:00 relay-fi05 sshd-session[82500]: Connection from 117.39.45.242 port 33268 on 87.58.151.218 port 22 rdomain "" 2026-09-29T20:56:10.599061+00:00 relay-fi05 sshd-session[82500]: Invalid user xiong from 117.39.45.242 port 33268 ... show less	Brute-Force SSH
Anonymous	2026-09-29 20:38:19 (3 days ago)	sshd	Brute-Force SSH
🇩🇪 DeeCipher	2026-09-29 19:25:43 (3 days ago)	2026-09-29T21:15:57.971856+02:00 helmgartner sshd[2383180]: User root from 117.39.45.242 not allowed ... show more 2026-09-29T21:15:57.971856+02:00 helmgartner sshd[2383180]: User root from 117.39.45.242 not allowed because not listed in AllowUsers 2026-09-29T21:25:12.286398+02:00 helmgartner sshd[2384276]: Invalid user botuser from 117.39.45.242 port 32811 2026-09-29T21:25:42.840036+02:00 helmgartner sshd[2384334]: Invalid user valheim from 117.39.45.242 port 33005 ... show less	Brute-Force
🇮🇹 Dario B.	2026-09-29 16:45:44 (3 days ago)	DATE:2026-09-29 18:45:44, IP:117.39.45.242, PORT:ssh SSH brute force auth (docker-dc)	Brute-Force SSH
🇭🇺 sRichy	2026-09-29 16:30:27 (3 days ago)	2026-09-29T18:26:51.816316+02:00 vpn sshd[77063]: Invalid user delphi from 117.39.45.242 port 32439 ... show more 2026-09-29T18:26:51.816316+02:00 vpn sshd[77063]: Invalid user delphi from 117.39.45.242 port 32439 2026-09-29T18:29:50.450262+02:00 vpn sshd[77072]: Invalid user sklep from 117.39.45.242 port 31830 2026-09-29T18:30:27.033131+02:00 vpn sshd[77079]: Invalid user ubuntu from 117.39.45.242 port 33425 ... show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-09-29 14:23:36 (4 days ago)	2026-09-29T17:23:35.573242+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-09-29T17:23:35.573242+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=117.39.45.242 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=51 ID=30919 DF PROTO=TCP SPT=32781 DPT=22632 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Ilop	2026-09-29 12:01:13 (4 days ago)	[hp-100] 3 unsolicited packets to honeypot ports 2222 (OCI DShield sensor)	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 210.1.59.163

🇩🇪 196.251.121.215

🇨🇴 176.57.207.7

🇨🇳 123.156.219.193

🇷🇴 92.118.39.14

🇺🇸 66.228.41.127

🇲🇱 197.155.134.251

🇫🇷 178.18.245.53

🇳🇱 177.1.189.0

🇺🇸 162.216.150.238

🇺🇿 109.94.173.183

🇸🇬 85.203.21.87

🇯🇵 84.247.157.60

🇬🇧 54.38.147.221

🇬🇧 31.14.254.9

🇺🇸 23.92.26.126

🇮🇪 20.238.100.89

🇺🇸 3.232.79.27

🇧🇷 205.210.31.222

🇫🇮 193.187.110.214