JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.25.249.117

116.25.249.117 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.25.249.117

Whois 116.25.249.117

IP Abuse Reports for 116.25.249.117:

This IP address has been reported a total of 48 times from 28 distinct sources. 116.25.249.117 was first reported on June 13th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SamJUK	2026-06-19 04:49:31 (14 hours ago)	2026-06-19T04:50:01.081165+00:00 hostname sshd[3684955]: Failed password for root from 116.25.249.11 ... show more 2026-06-19T04:50:01.081165+00:00 hostname sshd[3684955]: Failed password for root from 116.25.249.117 port 49776 ssh2 2026-06-19T04:50:03.634883+00:00 hostname sshd[3685005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.249.117 user=root 2026-06-19T04:50:05.490467+00:00 hostname sshd[3685005]: Failed password for root from 116.25.249.117 port 50988 ssh2 2026-06-19T04:50:07.302297+00:00 hostname sshd[3685086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.249.117 user=root 2026-06-19T04:50:09.042097+00:00 hostname sshd[3685086]: Failed password for root from 116.25.249.117 port 52362 ssh2 ... show less	Brute-Force SSH
🇩🇪 SamJUK	2026-06-19 04:27:17 (14 hours ago)	2026-06-19T04:27:47.399688+00:00 hostname sshd[3670263]: Failed password for root from 116.25.249.11 ... show more 2026-06-19T04:27:47.399688+00:00 hostname sshd[3670263]: Failed password for root from 116.25.249.117 port 48008 ssh2 2026-06-19T04:27:49.597093+00:00 hostname sshd[3670323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.249.117 user=root 2026-06-19T04:27:51.317332+00:00 hostname sshd[3670323]: Failed password for root from 116.25.249.117 port 49224 ssh2 2026-06-19T04:27:53.280556+00:00 hostname sshd[3670328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.249.117 user=root 2026-06-19T04:27:55.215397+00:00 hostname sshd[3670328]: Failed password for root from 116.25.249.117 port 50642 ssh2 ... show less	Brute-Force SSH
🇩🇪 LoNET	2026-06-19 03:59:49 (15 hours ago)	Report 2480330 with IP 3527897 for SSH brute-force attack by source 3522555 via ssh-honeypot/0.2.0+h ... show more Report 2480330 with IP 3527897 for SSH brute-force attack by source 3522555 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Anonymous	2026-06-19 03:38:13 (15 hours ago)	2026-06-18T23:38:10.629200-04:00 seraldjr sshd[3669470]: Invalid user user from 116.25.249.117 port ... show more 2026-06-18T23:38:10.629200-04:00 seraldjr sshd[3669470]: Invalid user user from 116.25.249.117 port 46830 2026-06-18T23:38:11.921794-04:00 seraldjr sshd[3669472]: Invalid user user from 116.25.249.117 port 47304 2026-06-18T23:38:13.228116-04:00 seraldjr sshd[3669474]: Invalid user user from 116.25.249.117 port 47714 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-19 03:20:32 (15 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇪🇸 WebTejo	2026-06-19 02:05:52 (17 hours ago)	Detected multiple authentication failures and invalid user attempts from IP address 116.25.249.117 o ... show more Detected multiple authentication failures and invalid user attempts from IP address 116.25.249.117 on [ES] Sapphire Node. show less	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-06-19 00:14:12 (18 hours ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇩🇪 Hyper Tech⚡	2026-06-18 13:23:58 (1 day ago)	Automatically reported by the Fail2Ban security system due to suspicious activity	Brute-Force SSH
🇩🇪 ipcop.net	2026-06-17 21:28:04 (1 day ago)	2026-06-17T23:27:58.079318+02:00 router.wipp.f-heim.de sshd[1934030]: Connection closed by authentic ... show more 2026-06-17T23:27:58.079318+02:00 router.wipp.f-heim.de sshd[1934030]: Connection closed by authenticating user root 116.25.249.117 port 37006 [preauth] 2026-06-17T23:27:59.541507+02:00 router.wipp.f-heim.de sshd[1934034]: Connection closed by authenticating user root 116.25.249.117 port 37588 [preauth] 2026-06-17T23:28:00.978084+02:00 router.wipp.f-heim.de sshd[1934041]: Connection closed by authenticating user root 116.25.249.117 port 38174 [preauth] 2026-06-17T23:28:02.268466+02:00 router.wipp.f-heim.de sshd[1934045]: Connection closed by authenticating user root 116.25.249.117 port 38776 [preauth] 2026-06-17T23:28:03.511443+02:00 router.wipp.f-heim.de sshd[1934125]: Connection closed by authenticating user root 116.25.249.117 port 39304 [preauth] show less	Brute-Force
🇩🇪 NetWatch	2026-06-17 13:53:51 (2 days ago)	The IP 116.25.249.117 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇷🇺 Kotiacat_one	2026-06-17 13:32:49 (2 days ago)	2026-06-17T16:32:41.264113+03:00 kotia sshd-session[1868510]: Invalid user user from 116.25.249.117 ... show more 2026-06-17T16:32:41.264113+03:00 kotia sshd-session[1868510]: Invalid user user from 116.25.249.117 port 40526 2026-06-17T16:32:44.785637+03:00 kotia sshd-session[1868512]: Invalid user user from 116.25.249.117 port 42266 2026-06-17T16:32:48.764139+03:00 kotia sshd-session[1868514]: Invalid user user from 116.25.249.117 port 43980 ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-06-17 10:27:52 (2 days ago)	2026-06-17T10:27:49.290962+00:00 ip-172-31-5-127 sshd[2437699]: Connection closed by authenticating ... show more 2026-06-17T10:27:49.290962+00:00 ip-172-31-5-127 sshd[2437699]: Connection closed by authenticating user root 116.25.249.117 port 44554 [preauth] 2026-06-17T10:27:50.602622+00:00 ip-172-31-5-127 sshd[2437701]: Connection closed by authenticating user root 116.25.249.117 port 44870 [preauth] 2026-06-17T10:27:51.905174+00:00 ip-172-31-5-127 sshd[2437703]: Connection closed by authenticating user root 116.25.249.117 port 45216 [preauth] ... show less	Brute-Force SSH
🇮🇪 BWAbuseMonitor	2026-06-17 10:20:30 (2 days ago)	Brute force attack detected from IP 116.25.249.117.	Brute-Force
🇬🇧 PeravixGroup	2026-06-17 01:22:32 (2 days ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇳🇱 EGP Abuse Dept	2026-06-17 00:27:24 (2 days ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.203.245.82

🇰🇷 115.178.75.243

🇨🇳 106.9.136.81

🇧🇷 45.164.251.106

🇳🇱 45.148.10.200

🇮🇳 20.219.193.93

🇮🇷 193.151.141.41

🇩🇪 152.53.161.124

🇬🇧 103.104.22.207

🇩🇪 69.5.169.14

🇺🇸 66.132.186.206

🇺🇸 47.77.220.115

🇳🇱 45.148.10.157

🇧🇷 43.157.150.69

🇹🇷 37.148.209.106

🇬🇧 35.203.210.208

🇺🇸 205.210.31.98

🇹🇭 203.154.158.195

🇭🇰 199.45.155.90

🇫🇮 147.185.133.197