JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.220.89.96

117.220.89.96 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 60%: ?

60%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Hostname(s)	static.ill.117.220.89.96.bsnl.co.in
Domain Name	bsnl.in
Country	🇮🇳 India
City	Patna, Bihar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.220.89.96

Whois 117.220.89.96

IP Abuse Reports for 117.220.89.96:

This IP address has been reported a total of 13 times from 9 distinct sources. 117.220.89.96 was first reported on July 27th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 wnbhosting.dk	2026-07-27 16:26:52 (17 hours ago)	Invalid user ubuntu from 117.220.89.96 port 61144	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-27 15:18:58 (18 hours ago)	[15:18] Attempted SSH login with credentials ubuntu:P@**********45	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 15:17:11 (18 hours ago)	117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account ... show more 117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 10:11:55 15022 sshd[31330]: Invalid user ubuntu from 41.38.6.174 port 49738 Jul 27 10:02:05 15022 sshd[26439]: Invalid user ubuntu from 5.40.184.143 port 61063 Jul 27 10:02:07 15022 sshd[26439]: Failed password for invalid user ubuntu from 5.40.184.143 port 61063 ssh2 Jul 27 10:16:53 15022 sshd[1448]: Invalid user ubuntu from 117.220.89.96 port 61038 Jul 27 10:11:57 15022 sshd[31330]: Failed password for invalid user ubuntu from 41.38.6.174 port 49738 ssh2 IP Addresses Blocked: 41.38.6.174 (EG/Egypt/-) 5.40.184.143 (ES/Spain/5.40.184.143.static.user.ono.com) show less	Brute-Force SSH
🇧🇷 wagnerbocchi	2026-07-27 15:04:11 (18 hours ago)	2026-07-27T12:04:07.261742-03:00 wazuh sshd[887769]: Invalid user ubuntu from 117.220.89.96 port 652 ... show more 2026-07-27T12:04:07.261742-03:00 wazuh sshd[887769]: Invalid user ubuntu from 117.220.89.96 port 65268 2026-07-27T12:04:07.266085-03:00 wazuh sshd[887769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.220.89.96 2026-07-27T12:04:10.009102-03:00 wazuh sshd[887769]: Failed password for invalid user ubuntu from 117.220.89.96 port 65268 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 14:24:37 (19 hours ago)	117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account ... show more 117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 09:04:00 15616 sshd[13539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.79.47.70 user=root Jul 27 09:04:02 15616 sshd[13539]: Failed password for root from 115.79.47.70 port 51460 ssh2 Jul 27 09:24:17 15616 sshd[25333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.220.89.96 user=root Jul 27 09:09:03 15616 sshd[16768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.79.47.70 user=root Jul 27 09:09:05 15616 sshd[16768]: Failed password for root from 115.79.47.70 port 35528 ssh2 IP Addresses Blocked: 115.79.47.70 (VN/Vietnam/-) show less	Brute-Force SSH
🇨🇦 maik	2026-07-27 14:15:05 (19 hours ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇩🇪 laotuo	2026-07-27 14:04:21 (19 hours ago)	Jul 27 16:04:19 h2930838 sshd[21479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 27 16:04:19 h2930838 sshd[21479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.220.89.96 user=root Jul 27 16:04:20 h2930838 sshd[21479]: Failed password for invalid user root from 117.220.89.96 port 53113 ssh2 show less	Brute-Force SSH
🇸🇬 drewf.ink	2026-07-27 14:03:15 (19 hours ago)	[14:03] Attempted SSH login with credentials root:P4*********34	Brute-Force SSH
🇩🇪 senkodev	2026-07-27 13:50:33 (19 hours ago)	2026-07-27T15:50:32.234648+02:00 vm1386.de.snk.wtf sshd[332162]: Failed password for root from 117.2 ... show more 2026-07-27T15:50:32.234648+02:00 vm1386.de.snk.wtf sshd[332162]: Failed password for root from 117.220.89.96 port 60073 ssh2 2026-07-27T15:50:32.596151+02:00 vm1386.de.snk.wtf sshd[332162]: Connection closed by authenticating user root 117.220.89.96 port 60073 [preauth] ... show less	Brute-Force SSH
🇰🇷 2048	2026-07-27 13:37:55 (20 hours ago)	SSH credential brute-force observed by honeypot. \| Source IP: 117.220.89.96 \| Targeted device: Debia ... show more SSH credential brute-force observed by honeypot. \| Source IP: 117.220.89.96 \| Targeted device: Debian server \| First seen: 27 Jul 2026 13:37:55 UTC \| Last seen: 27 Jul 2026 13:37:55 UTC \| Attempts: 1 \| Client: SSH-2.0-RawPasswordConnectOnly_1.0 \| Sample credentials: root:P4s5word@1234 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:36:54 (22 hours ago)	117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account ... show more 117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:32:07 13469 sshd[17708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.220.89.96 user=root Jul 27 06:32:09 13469 sshd[17708]: Failed password for root from 117.220.89.96 port 55380 ssh2 Jul 27 06:27:40 13469 sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.95.30.253 user=root Jul 27 06:27:42 13469 sshd[15365]: Failed password for root from 179.95.30.253 port 57413 ssh2 Jul 27 06:36:31 13469 sshd[19796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.134.108.70 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 adnscom.net	2026-07-27 11:21:49 (22 hours ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 11:13:55 (22 hours ago)	117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account ... show more 117.220.89.96 (IN/India/static.ill.117.220.89.96.bsnl.co.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 06:09:12 14240 sshd[20086]: Failed password for root from 187.217.36.136 port 6299 ssh2 Jul 27 05:56:10 14240 sshd[13510]: Failed password for root from 51.53.80.224 port 42714 ssh2 Jul 27 06:09:10 14240 sshd[20086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.217.36.136 user=root Jul 27 06:13:32 14240 sshd[22181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.220.89.96 user=root Jul 27 06:13:33 14240 sshd[22181]: Failed password for root from 117.220.89.96 port 53607 ssh2 IP Addresses Blocked: 187.217.36.136 (MX/Mexico/customer-187-217-36-136.uninet-ide.com.mx) 51.53.80.224 (TW/Taiwan/-) show less	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 45.82.78.100

🇺🇸 172.190.220.228

🇨🇳 116.172.251.219

🇺🇸 91.230.168.18

🇵🇱 88.220.189.56

🇺🇦 195.64.239.86

🇷🇴 193.230.189.189

🇷🇴 193.32.162.84

🇺🇸 178.16.55.216

🇺🇸 162.216.149.61

🇭🇰 152.32.225.11

🇩🇪 147.45.199.86

🇨🇳 119.249.100.241

🇰🇷 116.123.150.231

🇷🇺 87.250.9.98

🇳🇱 77.91.71.66

🇺🇸 66.187.5.228

🇪🇬 41.45.186.218

🇷🇺 37.77.150.241

🇬🇧 35.203.211.159