There is provided an unauthorized-communication detecting apparatus. A measuring unit measures a transition of a communication state value between the unauthorized-communication detecting apparatus and a client apparatus. A transition pattern storage unit stores a transition pattern of the communication state value. An unauthorized-communication detecting unit detects unauthorized communication of the client apparatus on the basis of the transition pattern and a transition of the measured communication state value.