117.9.203.42
Classification: Suspicious
117.9.203.42 is a suspicious IP address. Reported by 4 threat sources, last seen 2026-07-17. Network: AS4837 China Unicom Tianjin Province Network.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-04-07 05:08:31 | 2026-07-17 06:44:13 | attacker malicious-activity | |
| Mail Spammer | Blocklist.de | 2023-04-07 05:16:07 | 2024-04-20 02:57:36 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2023-04-07 05:08:30 | 2024-04-20 02:41:43 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2023-04-07 05:08:31 | 2023-04-07 05:08:31 | ||
| Hacking | Maltiverse | 2023-01-07 08:29:54 | 2023-04-06 17:53:27 | malicious-activity | |
| Bruteforce | Maltiverse | 2023-01-08 19:06:34 | 2023-04-06 10:10:19 | malicious-activity | |
| IMAP Attacker | Maltiverse | 2023-02-05 21:28:50 | 2023-03-30 06:20:19 | malicious-activity | |
| Mail Spammer | Maltiverse | 2023-01-07 18:51:24 | 2023-03-30 06:20:19 | malicious-activity | |
| Malicious Host | Maltiverse | 2023-01-09 18:52:37 | 2023-03-27 12:53:08 | compromised malicious-activity | |
| HTTP Attacker | Maltiverse | 2023-01-25 15:42:08 | 2023-03-23 07:05:43 | malicious-activity | |
| Port Scanner | Maltiverse | 2023-01-26 21:37:01 | 2023-02-13 09:02:39 | anomalous-activity | |
| SSH Attacker | Maltiverse | 2023-01-28 20:05:45 | 2023-01-28 20:05:45 | malicious-activity | |
| HTTP Scrapper | Maltiverse | 2023-01-09 09:48:51 | 2023-01-09 09:48:51 | anomalous-activity |
Tags
mail spam attacker imap pop3 sasl botWhois information
- AS name
- AS4837 China Unicom Tianjin Province Network
- AS registry
- apnic
- AS date
- 2007-05-25 00:00:00
- AS CIDR
- 117.8.0.0/13
- CIDR
- 117.8.0.0/13
- Registrant
- China Unicom Tianjin Province Network
- Address
- No.21,Financial Street Beijing,100033 P.R.China
- City
- Tianjin
- Postal code
- 300061
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2023-04-07 05:08:30
- Last updated
- 2026-07-17 06:44:14
Malicious IPs in the same CIDR
117.14.113.10 117.15.89.217 117.11.88.7 117.11.89.118 117.11.88.239 117.8.65.184 117.14.51.58 117.11.91.109 117.11.89.122 117.14.112.130 117.14.112.103 117.9.170.239 117.14.147.204 117.11.88.205 117.11.88.211 117.11.89.10 117.11.88.179 117.15.91.182 117.9.171.89 117.14.112.128 117.15.90.32 117.11.91.247 117.11.90.177