JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

42.4.61.78

Neutral Activity

Abuse Confidence Score

0% Low Risk

308 reports

189 reporters · latest 2 months ago

ISP: UNICOM Liaoning Province Network
Usage Type: Fixed Line ISP
ASN: AS4837
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

42.4.61.78 has been reported 308 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

308 from 189 distinct reporters

First reported

March 18th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-15 07:06:21 UTC · (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=97, sources=1)	Hacking Brute-Force SSH
🇺🇸 jkhorvath	2026-05-01 04:30:54 UTC · (6 months ago)	SSH login attempt with user user	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-16 00:34:01 UTC · (6 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/42.4.61.78	Brute-Force
🇺🇸 SiteHUB Agency	2026-04-15 12:10:14 UTC · (6 months ago)	Brute force activities detected and blocked	Brute-Force
🇫🇮 KnightIndustries	2026-04-15 06:57:15 UTC · (6 months ago)	2026-04-15T08:57:03.581127+02:00 milkyway sshd[4034459]: Failed password for root from 42.4.61.78 port 36458 ssh2 2026-04-15T08:57:13.778561+02:00 milkyway sshd[4034489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ... show more 2026-04-15T08:57:03.581127+02:00 milkyway sshd[4034459]: Failed password for root from 42.4.61.78 port 36458 ssh2 2026-04-15T08:57:13.778561+02:00 milkyway sshd[4034489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root 2026-04-15T08:57:15.111918+02:00 milkyway sshd[4034489]: Failed password for root from 42.4.61.78 port 36460 ssh2 ... show less	Brute-Force SSH
🇸🇬 sh97	2026-04-15 04:37:32 UTC · (6 months ago)	SG05-ON: SSH Brute Force from 42.4.61.78 at 2026-04-15 10:07:31 IST	Brute-Force SSH
🇰🇷 Woodie	2026-04-15 00:51:32 UTC · (6 months ago)	2026-04-14T20:51:12.195981-04:00 debian sshd[3289598]: Failed password for root from 42.4.61.78 port 55026 ssh2 2026-04-14T20:51:16.818479-04:00 debian sshd[3289685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show more 2026-04-14T20:51:12.195981-04:00 debian sshd[3289598]: Failed password for root from 42.4.61.78 port 55026 ssh2 2026-04-14T20:51:16.818479-04:00 debian sshd[3289685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root 2026-04-14T20:51:18.505753-04:00 debian sshd[3289685]: Failed password for root from 42.4.61.78 port 55042 ssh2 2026-04-14T20:51:29.775598-04:00 debian sshd[3289892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root 2026-04-14T20:51:31.913187-04:00 debian sshd[3289892]: Failed password for root from 42.4.61.78 port 49204 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-04-15 00:25:25 UTC · (6 months ago)	2026-04-14T20:25:05.954641-04:00 debian sshd[3270511]: Failed password for root from 42.4.61.78 port 57350 ssh2 2026-04-14T20:25:12.269373-04:00 debian sshd[3270605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show more 2026-04-14T20:25:05.954641-04:00 debian sshd[3270511]: Failed password for root from 42.4.61.78 port 57350 ssh2 2026-04-14T20:25:12.269373-04:00 debian sshd[3270605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root 2026-04-14T20:25:13.911935-04:00 debian sshd[3270605]: Failed password for root from 42.4.61.78 port 56860 ssh2 2026-04-14T20:25:22.346139-04:00 debian sshd[3270699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root 2026-04-14T20:25:24.028329-04:00 debian sshd[3270699]: Failed password for root from 42.4.61.78 port 42670 ssh2 ... show less	Brute-Force SSH
🇯🇵 knock	2026-04-14 21:33:27 UTC · (6 months ago)	Knock-Knock honeypot brute-force: SSH (10 total hits)	Brute-Force SSH
🇰🇷 2048	2026-04-14 19:39:40 UTC · (6 months ago)	2026-04-15T04:39:39.025110+09:00 no3 sshd[3074065]: Connection closed by authenticating user root 42.4.61.78 port 37558 [preauth] ...	Brute-Force SSH
🇯🇵 Indexyz	2026-04-14 19:20:31 UTC · (6 months ago)	2026-04-15T03:20:27.785216+08:00 hostname sshd-session[1908124]: Invalid user user from 42.4.61.78 port 40794 2026-04-15T03:20:28.168112+08:00 hostname sshd-session[1908126]: Connection from 42.4.61.78 port 40806 on 115.231.27.164 port 22 rdomain ... show more 2026-04-15T03:20:27.785216+08:00 hostname sshd-session[1908124]: Invalid user user from 42.4.61.78 port 40794 2026-04-15T03:20:28.168112+08:00 hostname sshd-session[1908126]: Connection from 42.4.61.78 port 40806 on 115.231.27.164 port 22 rdomain "" 2026-04-15T03:20:28.909233+08:00 hostname sshd-session[1908126]: Invalid user user from 42.4.61.78 port 40806 2026-04-15T03:20:29.251720+08:00 hostname sshd-session[1908128]: Connection from 42.4.61.78 port 40808 on 115.231.27.164 port 22 rdomain "" 2026-04-15T03:20:29.730233+08:00 hostname sshd-session[1908128]: Invalid user user from 42.4.61.78 port 40808 show less	Brute-Force SSH
🇦🇺 specializedtom	2026-04-14 16:42:28 UTC · (6 months ago)	Fail2Ban triggered a ban on 42.4.61.78 for postfix-sasl	Phishing Email Spam Spoofing
🇨🇭 Boxis.net NOC	2026-04-14 16:07:21 UTC · (6 months ago)	(sshd) Failed SSH login from 42.4.61.78 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 14 18:06:56 da057 sshd[3304673]: Invalid user user from 42.4.61.78 port 52600 Apr 14 18:07:00 da057 sshd[3304721]: ... show more (sshd) Failed SSH login from 42.4.61.78 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 14 18:06:56 da057 sshd[3304673]: Invalid user user from 42.4.61.78 port 52600 Apr 14 18:07:00 da057 sshd[3304721]: Invalid user user from 42.4.61.78 port 52612 Apr 14 18:07:04 da057 sshd[3304781]: Invalid user user from 42.4.61.78 port 52628 Apr 14 18:07:08 da057 sshd[3304846]: Invalid user user from 42.4.61.78 port 36408 Apr 14 18:07:13 da057 sshd[3304888]: Invalid user user from 42.4.61.78 port 36422 show less	Port Scan
🇺🇸 yzfdude1	2026-04-14 13:38:28 UTC · (6 months ago)	Apr 14 07:38:09 b146-38 sshd[1522817]: Failed password for root from 42.4.61.78 port 46360 ssh2 Apr 14 07:38:26 b146-38 sshd[1522842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root Apr 1 ... show more Apr 14 07:38:09 b146-38 sshd[1522817]: Failed password for root from 42.4.61.78 port 46360 ssh2 Apr 14 07:38:26 b146-38 sshd[1522842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root Apr 14 07:38:28 b146-38 sshd[1522842]: Failed password for root from 42.4.61.78 port 36418 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-14 10:45:39 UTC · (6 months ago)	Apr 14 04:44:59 b146-57 sshd[792559]: Failed password for root from 42.4.61.78 port 53930 ssh2 Apr 14 04:45:35 b146-57 sshd[792567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root Apr 14 ... show more Apr 14 04:44:59 b146-57 sshd[792559]: Failed password for root from 42.4.61.78 port 53930 ssh2 Apr 14 04:45:35 b146-57 sshd[792567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.61.78 user=root Apr 14 04:45:37 b146-57 sshd[792567]: Failed password for root from 42.4.61.78 port 54532 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.164.176.52

🇺🇸 198.211.114.138

🇷🇺 178.178.194.134

🇺🇸 172.59.190.162

🇺🇸 165.22.180.46

🇺🇸 143.109.162.215

🇨🇳 61.173.145.175

🇮🇳 47.15.240.107

🇺🇸 40.223.204.205

🇺🇸 40.223.203.143

🇩🇪 4.184.246.230

🇺🇸 2607:fb92:2a01:142f:7de8:fd37:9ff5:ffb9

🇺🇸 216.218.206.69

🇧🇷 189.28.240.185

🇺🇸 172.252.193.26

🇺🇸 172.252.30.35

🇳🇱 167.71.4.213

🇺🇸 158.94.187.204

🇯🇵 156.227.234.198

🇮🇳 152.59.120.133