JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.66.32.238

Neutral Activity

Abuse Confidence Score

0% Low Risk

12 reports

9 reporters · latest 1 year ago

ISP: CHINANET anhui province network
Usage Type: Fixed Line ISP
ASN: AS134425
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Hefei, Anhui

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

117.66.32.238 has been reported 12 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

12 from 9 distinct reporters

First reported

July 3rd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Porter	2025-07-15 11:31:39 (1 year ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repea ... show more Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
🇨🇳 ThreatBook.io	2025-07-06 23:01:46 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/117.66.32.238	SSH
🇩🇪 balint1414	2025-07-06 13:04:02 (1 year ago)	Jul 6 15:03:07 mail sshd[2928347]: Failed password for root from 117.66.32.238 port 54032 ssh2 Jul 6 15:03:32 mail sshd[2934052]: Failed password for root from 117.66.32.238 port 56168 ssh2 Jul 6 15:04:01 mail sshd[2938542]: Failed password for ro ... show more Jul 6 15:03:07 mail sshd[2928347]: Failed password for root from 117.66.32.238 port 54032 ssh2 Jul 6 15:03:32 mail sshd[2934052]: Failed password for root from 117.66.32.238 port 56168 ssh2 Jul 6 15:04:01 mail sshd[2938542]: Failed password for root from 117.66.32.238 port 58312 ssh2 show less	Brute-Force SSH
🇩🇪 christianb	2025-07-05 09:07:37 (1 year ago)	(sshd) Failed SSH login from 117.66.32.238 (CN/China/-)	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2025-07-05 07:44:04 (1 year ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇨🇳 ThreatBook.io	2025-07-04 23:59:08 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/117.66.32.238 2025-07-04 14:27:58 ["uname -s -m"]	SSH
🇺🇸 Porter	2025-07-04 10:17:18 (1 year ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repea ... show more Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
🇨🇳 ThreatBook.io	2025-07-04 00:17:07 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/117.66.32.238 2025-07-03 23:18:33 ["uname -s -m"]	Brute-Force
🇩🇪 TostHost	2025-07-03 17:13:20 (1 year ago)	Fail2Ban detected SSH brute-force attack	Brute-Force SSH
Anonymous	2025-07-03 14:29:46 (1 year ago)	117.66.32.238 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 3 10:29:39 sshd[31211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more 117.66.32.238 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 3 10:29:39 sshd[31211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.66.32.238 user=[USERNAME] show less	DDoS Attack
🇸🇪 sa0azs	2025-07-03 12:02:28 (1 year ago)	Jul 3 14:02:03 OakCottage sshd[27901]: Failed password for root from 117.66.32.238 port 56722 ssh2 Jul 3 14:02:24 OakCottage sshd[27915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.66.32.238 user=ro ... show more Jul 3 14:02:03 OakCottage sshd[27901]: Failed password for root from 117.66.32.238 port 56722 ssh2 Jul 3 14:02:24 OakCottage sshd[27915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.66.32.238 user=root Jul 3 14:02:26 OakCottage sshd[27915]: Failed password for root from 117.66.32.238 port 59472 ssh2 ... show less	Brute-Force SSH
🇳🇱 Study Bitcoin 🤗	2025-07-03 10:18:42 (1 year ago)	Port probe to tcp/22 (ssh) [srv125]	Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 222.96.89.197

🇩🇪 209.166.28.196

🇹🇳 197.5.145.150

🇺🇸 195.184.76.117

🇷🇴 193.46.255.86

🇵🇪 190.120.229.2

🇰🇷 175.196.78.7

🇺🇸 162.216.150.105

🇺🇸 154.206.89.53

🇯🇵 104.46.209.135

🇮🇩 103.235.74.108

🇮🇩 103.235.74.94

🇺🇸 71.6.246.58

🇺🇸 68.225.62.115

🇩🇪 49.13.57.248

🇳🇱 45.148.10.28

🇸🇬 45.78.201.248

🇶🇦 37.186.50.241

🇧🇪 207.175.157.156

🇧🇷 201.17.146.173