JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.4.63.139

42.4.63.139 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 46%: ?

46%

ISP	UNICOM Liaoning Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.4.63.139

Whois 42.4.63.139

IP Abuse Reports for 42.4.63.139:

This IP address has been reported a total of 62 times from 10 distinct sources. 42.4.63.139 was first reported on April 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 CGT Software Webmaster	2026-06-13 02:47:45 (1 week ago)	2026-06-13T10:47:39.757561+08:00 VM-8-9-debian sshd[2330318]: Failed password for root from 42.4.63. ... show more 2026-06-13T10:47:39.757561+08:00 VM-8-9-debian sshd[2330318]: Failed password for root from 42.4.63.139 port 38586 ssh2 2026-06-13T10:47:41.392841+08:00 VM-8-9-debian sshd[2330322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.63.139 user=root 2026-06-13T10:47:43.694237+08:00 VM-8-9-debian sshd[2330322]: Failed password for root from 42.4.63.139 port 49212 ssh2 ... show less	Port Scan Brute-Force
🇯🇵 Indexyz	2026-06-12 19:47:58 (1 week ago)	2026-06-13T03:47:56.709586+08:00 hostname sshd-session[213318]: Invalid user ubuntu from 42.4.63.1 ... show more 2026-06-13T03:47:56.709586+08:00 hostname sshd-session[213318]: Invalid user ubuntu from 42.4.63.139 port 41386 2026-06-13T03:47:56.871150+08:00 hostname sshd-session[213321]: Connection from 42.4.63.139 port 41404 on 115.231.27.164 port 22 rdomain "" 2026-06-13T03:47:57.100466+08:00 hostname sshd-session[213321]: Invalid user ubuntu from 42.4.63.139 port 41404 2026-06-13T03:47:57.274988+08:00 hostname sshd-session[213324]: Connection from 42.4.63.139 port 41418 on 115.231.27.164 port 22 rdomain "" 2026-06-13T03:47:57.511643+08:00 hostname sshd-session[213324]: Invalid user ubuntu from 42.4.63.139 port 41418 show less	Brute-Force SSH
🇨🇳 kipfel★	2026-06-12 01:45:08 (1 week ago)	2026-06-12T09:45:07.013983+08:00 self-dedi-wyse-5070-tna sshd-session[509241]: Invalid user ubuntu f ... show more 2026-06-12T09:45:07.013983+08:00 self-dedi-wyse-5070-tna sshd-session[509241]: Invalid user ubuntu from 42.4.63.139 port 43458 2026-06-12T09:45:07.214137+08:00 self-dedi-wyse-5070-tna sshd-session[509244]: Invalid user ubuntu from 42.4.63.139 port 43484 2026-06-12T09:45:07.431205+08:00 self-dedi-wyse-5070-tna sshd-session[509247]: Invalid user ubuntu from 42.4.63.139 port 43498 ... show less	Brute-Force SSH
🇨🇳 Indexyz	2026-06-11 09:29:20 (1 week ago)	2026-06-11T17:29:01.514534+08:00 hostname sshd-session[404678]: Invalid user ubuntu from 42.4.63.1 ... show more 2026-06-11T17:29:01.514534+08:00 hostname sshd-session[404678]: Invalid user ubuntu from 42.4.63.139 port 45424 2026-06-11T17:29:19.053148+08:00 hostname sshd-session[404686]: Connection from 42.4.63.139 port 51192 on 10.89.160.7 port 22 rdomain "" 2026-06-11T17:29:19.197793+08:00 hostname sshd-session[404686]: Invalid user ubuntu from 42.4.63.139 port 51192 2026-06-11T17:29:19.335717+08:00 hostname sshd-session[404690]: Connection from 42.4.63.139 port 51208 on 10.89.160.7 port 22 rdomain "" 2026-06-11T17:29:19.490939+08:00 hostname sshd-session[404690]: Invalid user ubuntu from 42.4.63.139 port 51208 show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-06-10 21:27:16 (1 week ago)	2026-06-11T05:27:13.105754+08:00 pbs sshd[2973345]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-11T05:27:13.105754+08:00 pbs sshd[2973345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.4.63.139 user=root 2026-06-11T05:27:15.309412+08:00 pbs sshd[2973345]: Failed password for root from 42.4.63.139 port 43744 ssh2 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-06-08 09:56:42 (1 week ago)	Jun 8 17:56:41 pbs sshd[535858]: Connection reset by 42.4.63.139 port 33430 [preauth] ...	Brute-Force SSH
🇨🇳 pengpeng	2026-06-08 08:07:31 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇳 Indexyz	2026-06-07 12:47:43 (2 weeks ago)	2026-06-07T20:47:40.193762+08:00 hostname sshd-session[1365377]: Invalid user ubuntu from 42.4.63. ... show more 2026-06-07T20:47:40.193762+08:00 hostname sshd-session[1365377]: Invalid user ubuntu from 42.4.63.139 port 42608 2026-06-07T20:47:40.375089+08:00 hostname sshd-session[1365380]: Connection from 42.4.63.139 port 42628 on 10.66.0.230 port 22 rdomain "" 2026-06-07T20:47:40.610236+08:00 hostname sshd-session[1365380]: Invalid user ubuntu from 42.4.63.139 port 42628 2026-06-07T20:47:40.791144+08:00 hostname sshd-session[1365383]: Connection from 42.4.63.139 port 42650 on 10.66.0.230 port 22 rdomain "" 2026-06-07T20:47:41.032859+08:00 hostname sshd-session[1365383]: Invalid user ubuntu from 42.4.63.139 port 42650 show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-06 20:42:44 (2 weeks ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇨🇳 kipfel★	2026-06-01 03:33:44 (2 weeks ago)	2026-06-01T11:33:43.158149+08:00 localhost sshd-session[13028]: Invalid user ubuntu from 42.4.63.139 ... show more 2026-06-01T11:33:43.158149+08:00 localhost sshd-session[13028]: Invalid user ubuntu from 42.4.63.139 port 51618 2026-06-01T11:33:43.442810+08:00 localhost sshd-session[13031]: Invalid user ubuntu from 42.4.63.139 port 51644 2026-06-01T11:33:43.733260+08:00 localhost sshd-session[13035]: Invalid user ubuntu from 42.4.63.139 port 51656 ... show less	Brute-Force SSH
🇨🇳 kipfel★	2026-05-31 02:49:10 (3 weeks ago)	2026-05-31T10:49:09.189346+08:00 localhost sshd-session[3796008]: Invalid user ubuntu from 42.4.63.1 ... show more 2026-05-31T10:49:09.189346+08:00 localhost sshd-session[3796008]: Invalid user ubuntu from 42.4.63.139 port 43952 2026-05-31T10:49:09.459561+08:00 localhost sshd-session[3796016]: Invalid user ubuntu from 42.4.63.139 port 43980 2026-05-31T10:49:09.743358+08:00 localhost sshd-session[3796019]: Invalid user ubuntu from 42.4.63.139 port 44000 ... show less	Brute-Force SSH
🇨🇳 Indexyz	2026-05-30 22:06:44 (3 weeks ago)	2026-05-31T06:06:16.658760+08:00 hostname sshd-session[176303]: Invalid user ubuntu from 42.4.63.1 ... show more 2026-05-31T06:06:16.658760+08:00 hostname sshd-session[176303]: Invalid user ubuntu from 42.4.63.139 port 40524 2026-05-31T06:06:34.192703+08:00 hostname sshd-session[176313]: Connection from 42.4.63.139 port 45950 on 10.0.4.13 port 22 rdomain "" 2026-05-31T06:06:34.335826+08:00 hostname sshd-session[176313]: Invalid user ubuntu from 42.4.63.139 port 45950 2026-05-31T06:06:34.470121+08:00 hostname sshd-session[176317]: Connection from 42.4.63.139 port 45982 on 10.0.4.13 port 22 rdomain "" 2026-05-31T06:06:34.613283+08:00 hostname sshd-session[176317]: Invalid user ubuntu from 42.4.63.139 port 45982 show less	Brute-Force SSH
🇨🇳 pengpeng	2026-05-30 21:25:09 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇳 Fire Name	2026-05-30 18:24:56 (3 weeks ago)	2026-05-31T02:24:55.096472+08:00 localhost sshd[692414]: Invalid user ubuntu from 42.4.63.139 port 4 ... show more 2026-05-31T02:24:55.096472+08:00 localhost sshd[692414]: Invalid user ubuntu from 42.4.63.139 port 45256 2026-05-31T02:24:55.415280+08:00 localhost sshd[692423]: Invalid user ubuntu from 42.4.63.139 port 45270 2026-05-31T02:24:55.740072+08:00 localhost sshd[692426]: Invalid user ubuntu from 42.4.63.139 port 45282 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-05-29 13:41:43 (3 weeks ago)	May 29 21:41:42 pbs sshd[456707]: Connection reset by 42.4.63.139 port 54058 [preauth] ...	Brute-Force SSH

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.184.55.43

🇳🇱 176.65.139.246

🇭🇰 152.32.189.121

🇳🇱 45.198.224.115

🇿🇦 34.35.44.243

🇺🇸 205.210.31.111

🇺🇸 147.185.132.171

🇰🇭 117.20.119.70

🇳🇱 81.19.216.94

🇺🇸 2604:a880:400:d1:0:4:9e93:1

🇨🇳 182.43.76.120

🇩🇪 167.94.145.30

🇨🇳 94.191.106.186

🇩🇪 64.89.163.132

🇺🇸 49.51.73.183

🇺🇸 34.59.55.153

🇨🇳 124.88.113.253

🇭🇰 118.193.35.44

🇰🇷 101.36.114.209

🇨🇳 101.23.163.44