JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.51.42.209

42.51.42.209 was found in our database!

This IP was reported 7,445 times. Confidence of Abuse is 100%: ?

100%

ISP	Henan Telcom Union Technology Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56005
Domain Name	htu.cc
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.51.42.209

Whois 42.51.42.209

IP Abuse Reports for 42.51.42.209:

This IP address has been reported a total of 7,445 times from 1,236 distinct sources. 42.51.42.209 was first reported on August 20th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-06-01 00:17:04 (3 days ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH	SSH Port Scan
🇺🇸 3rdKey	2026-05-31 21:55:02 (3 days ago)	OpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated repor ... show more OpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated report. show less	Port Scan Brute-Force SSH
🇫🇷 tecnicorioja	2026-05-31 20:00:03 (3 days ago)	Failed password for root May 31 18:02:50 port 57382	Brute-Force SSH
🇩🇪 licen777	2026-05-31 17:50:50 (3 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T16:44:17Z and 2026-05-3 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T16:44:17Z and 2026-05-31T17:50:50Z show less	Brute-Force SSH
🇬🇧 anycast_ac	2026-05-31 16:30:12 (3 days ago)	[WebProtection] L4/L7 attack source · L4-22-CC-DROP · 5 hits/window	Port Scan SSH
🇩🇪 DEV-DNS	2026-05-31 14:52:21 (3 days ago)	(sshd) Failed SSH login from 42.51.42.209 (CN/China/Guangdong/Shenzhen/-/[redacted])	Brute-Force SSH
🇩🇪 Martin Lundstrom	2026-05-31 14:07:18 (3 days ago)	https://www.eagleeye-intelligence.com — IDS: network scan. Automatically detected and blocked.	Port Scan Web App Attack
🇩🇪 ghostwarriors	2026-05-31 13:50:21 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 pcpiefke	2026-05-31 13:22:29 (3 days ago)	(sshd) Failed SSH login from 42.51.42.209 (CN/China/-)	Brute-Force SSH
🇺🇸 ras07	2026-05-31 12:00:06 (3 days ago)	Brute force SSH login attempts.	Brute-Force SSH
🇩🇪 arc21	2026-05-31 10:41:17 (3 days ago)	2026-05-31T10:40:30.795989+00:00 new-billing sshd[105581]: pam_unix(sshd:auth): authentication failu ... show more 2026-05-31T10:40:30.795989+00:00 new-billing sshd[105581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 2026-05-31T10:40:32.202861+00:00 new-billing sshd[105581]: Failed password for invalid user vagrant from 42.51.42.209 port 39974 ssh2 2026-05-31T10:41:14.877816+00:00 new-billing sshd[105592]: Invalid user root1 from 42.51.42.209 port 36714 2026-05-31T10:41:14.884252+00:00 new-billing sshd[105592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 2026-05-31T10:41:16.331611+00:00 new-billing sshd[105592]: Failed password for invalid user root1 from 42.51.42.209 port 36714 ssh2 ... show less	Brute-Force SSH
🇩🇪 Admins@FBN	2026-05-31 08:01:55 (3 days ago)	FW-PortScan: Traffic Blocked srcport=39762 dstport=22	Port Scan Hacking SSH
🇨🇳 CGT Software Webmaster	2026-05-31 06:50:17 (3 days ago)	2026-05-31T14:45:22.008251+08:00 VM-8-9-debian sshd[4120818]: pam_unix(sshd:auth): authentication fa ... show more 2026-05-31T14:45:22.008251+08:00 VM-8-9-debian sshd[4120818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 2026-05-31T14:45:24.631296+08:00 VM-8-9-debian sshd[4120818]: Failed password for invalid user logviewer from 42.51.42.209 port 37744 ssh2 2026-05-31T14:50:15.659382+08:00 VM-8-9-debian sshd[4121493]: Invalid user arjun from 42.51.42.209 port 48696 ... show less	Port Scan Brute-Force
🇩🇪 mueslo	2026-05-31 03:45:13 (3 days ago)	2026-05-31T05:40:41.385673+02:00 hyperion sshd-session[259896]: pam_sss(sshd:auth): authentication f ... show more 2026-05-31T05:40:41.385673+02:00 hyperion sshd-session[259896]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 user=mailuser 2026-05-31T05:40:43.644141+02:00 hyperion sshd-session[259896]: Failed password for invalid user mailuser from 42.51.42.209 port 39220 ssh2 2026-05-31T05:45:11.752438+02:00 hyperion sshd-session[260352]: Invalid user ubuntu from 42.51.42.209 port 43930 2026-05-31T05:45:11.759566+02:00 hyperion sshd-session[260352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 2026-05-31T05:45:11.765023+02:00 hyperion sshd-session[260352]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 user=ubuntu 2026-05-31T05:45:13.080552+02:00 hyperion sshd-session[260352]: Failed password for invalid user ubuntu from 42.51.42.209 port 43930 ssh2 show less	Brute-Force SSH
🇰🇷 Woodie	2026-05-31 01:54:08 (4 days ago)	2026-05-30T21:49:12.553899-04:00 debian sshd[1265267]: Failed password for invalid user osm from 42. ... show more 2026-05-30T21:49:12.553899-04:00 debian sshd[1265267]: Failed password for invalid user osm from 42.51.42.209 port 51636 ssh2 2026-05-30T21:50:27.825380-04:00 debian sshd[1266070]: Invalid user oracle from 42.51.42.209 port 60080 2026-05-30T21:50:27.828905-04:00 debian sshd[1266070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.209 2026-05-30T21:50:29.906653-04:00 debian sshd[1266070]: Failed password for invalid user oracle from 42.51.42.209 port 60080 ssh2 2026-05-30T21:54:07.531372-04:00 debian sshd[1268786]: Invalid user user01 from 42.51.42.209 port 59604 ... show less	Brute-Force SSH

Showing 61 to 75 of 7445 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 213.218.214.110

🇧🇷 205.210.31.200

🇵🇦 191.101.96.181

🇳🇱 173.239.217.185

🇳🇱 173.239.217.184

🇸🇿 143.105.155.153

🇵🇰 103.196.161.232

🇷🇺 91.245.159.185

🇺🇸 69.12.64.44

🇺🇸 66.154.105.106

🇱🇹 62.60.130.251

🇸🇬 47.236.172.167

🇬🇧 45.82.76.118

🇸🇬 45.78.198.177

🇧🇪 34.14.116.242

🇺🇸 20.168.6.226

🇺🇸 2a03:2880:f806:1e::

🇦🇺 2406:2d40:41c2:9d08:e0d7:d926:3f30:7d93

🇯🇵 207.56.225.202

🇳🇱 204.76.203.222