JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.202.16.249

117.202.16.249 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 29%: ?

29%

ISP	NIB (National Internet Backbone)
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.co.in
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.202.16.249

Whois 117.202.16.249

IP Abuse Reports for 117.202.16.249:

This IP address has been reported a total of 109 times from 26 distinct sources. 117.202.16.249 was first reported on March 21st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-11 13:00:45 (2 days ago)	1783774844 - 07/11/2026 15:00:44 Host: 117.202.16.249/117.202.16.249 Port: 445 TCP Blocked ...	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-26 17:06:55 (2 weeks ago)	Honeypot hit: SMB traffic on port 445	IoT Targeted
🇺🇸 drewf.ink	2026-06-23 15:00:23 (2 weeks ago)	[15:00] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [15:00] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
Anonymous	2026-06-15 21:55:35 (4 weeks ago)	Unauthorized connection to SMB port 445	Port Scan
🇬🇧 Birdo	2026-05-18 11:02:10 (1 month ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-16 16:45:27 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-05-16 11:57:26 (1 month ago)	2026-05-16 11:57:25 warning[4287498]: host unknown[117.202.16.249]: unauthorized smb acces ... show more 2026-05-16 11:57:25 warning[4287498]: host unknown[117.202.16.249]: unauthorized smb access attempted: tcp/445 show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-05-15 16:38:06 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-13 08:44:02 (2 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-10 00:56:08 (2 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 _ArminS_	2026-05-09 19:35:37 (2 months ago)	SP-Scan 10403:445 detected 2026.05.09 21:35:37 blocked until 2026.06.28 14:38:24	Port Scan
🇬🇧 PeravixGroup	2026-05-05 06:04:57 (2 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-03-28 19:35:49 (3 months ago)	2026-03-28T20:35:48.880736+01:00 vps kernel: [36466776.664439] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-03-28T20:35:48.880736+01:00 vps kernel: [36466776.664439] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=117.202.16.249 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=24622 DF PROTO=TCP SPT=9137 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-03-10 15:43:46 (4 months ago)	Mar 10 16:43:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 10 16:43:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=117.202.16.249 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=22387 DF PROTO=TCP SPT=9381 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-03-10 14:53:02 (4 months ago)	Mar 10 15:53:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Mar 10 15:53:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=117.202.16.249 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=6608 DF PROTO=TCP SPT=9314 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.64

🇹🇭 49.231.182.3

🇹🇼 198.235.24.51

🇬🇧 193.176.29.26

🇦🇴 193.163.125.178

🇩🇪 167.94.146.35

🇻🇳 113.188.127.1

🇹🇼 111.246.3.7

🇹🇷 78.189.17.35

🇸🇬 47.84.106.205

🇳🇱 45.148.10.141

🇫🇷 172.71.131.19

🇫🇷 172.71.123.172

🇮🇩 152.32.154.44

🇺🇸 144.202.92.17

🇺🇸 98.83.94.113

🇷🇴 92.118.39.212

🇺🇸 74.7.242.60

🇺🇸 66.132.172.233

🇸🇪 2a04:4e40:4400:0:70e:b84e:31b7:5aa