JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.232.25.161

Recent Activity

Abuse Confidence Score

100% Critical

40 reports

38 reporters · latest 19 hours ago

ISP: NIB (National Internet Backbone)
Usage Type: Fixed Line ISP
ASN: AS9829
Domain Name: bsnl.co.in
Country: 🇮🇳 India
City: Byndoor, Karnataka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

40 from 38 distinct reporters

First reported

November 10th 2026

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇫🇷 France 11 🇩🇪 Germany 9 🇺🇸 United States of America 7

Most common categories SSH 34 Brute-Force 32 Port Scan 5 Hacking 4 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-11-12 05:12:55 UTC · (19 hours ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇬🇧 Stuart Reid	2026-11-11 13:43:52 UTC · (1 day ago)	...	SSH
🇫🇮 Birdo	2026-11-11 13:28:08 UTC · (1 day ago)	[Honeypot Report] Unauthorised shell access and command execution via SSH A remote host attempted multiple logins against our emulated SSH service, then obtained shell access and executed commands. Observed: 2026-11-11 13:27 to 2026-11-11 13:28 UTC ... show more [Honeypot Report] Unauthorised shell access and command execution via SSH A remote host attempted multiple logins against our emulated SSH service, then obtained shell access and executed commands. Observed: 2026-11-11 13:27 to 2026-11-11 13:28 UTC \| 2 sessions \| 6 events \| SSH (port 22) Attack chain: 1. 2 credential attempts: root/---fuck_you----, root/123456 2. Shell access obtained; 1 distinct command executed: uname -s -m Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/11/117.232.25.161.md Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised. show less	Hacking SSH Brute-Force
🇺🇸 MarkJGreen	2026-11-11 12:24:24 UTC · (1 day ago)	SSH brute force: 3 login attempts, 1 shell commands after login. Last seen 2026-11-11 12:11 UTC (honeypot).	SSH Brute-Force
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-11-11 11:53:37 UTC · (1 day ago)	2026-11-11T12:51:48.722738+01:00 runner3 sshd[2934303]: Failed password for root from 117.232.25.161 port 37172 ssh2 2026-11-11T12:52:45.612659+01:00 runner3 sshd[2935166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-11-11T12:51:48.722738+01:00 runner3 sshd[2934303]: Failed password for root from 117.232.25.161 port 37172 ssh2 2026-11-11T12:52:45.612659+01:00 runner3 sshd[2935166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.232.25.161 user=root 2026-11-11T12:52:47.766532+01:00 runner3 sshd[2935166]: Failed password for root from 117.232.25.161 port 59438 ssh2 2026-11-11T12:53:38.283711+01:00 runner3 sshd[2935366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.232.25.161 user=root 2026-11-11T12:53:40.046176+01:00 runner3 sshd[2935366]: Failed password for root from 117.232.25.161 port 10735 ssh2 ... show less	Brute-Force SSH
🇫🇷 uthul	2026-11-11 11:40:42 UTC · (1 day ago)	T-Pot honeypot: 7 hits on ports [22222] (automated)	Port Scan
🇫🇷 EvoX	2026-11-11 09:51:43 UTC · (1 day ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 22222 [1] TCP	Port Scan
🇫🇷 Kejult	2026-11-11 08:59:21 UTC · (1 day ago)	Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.	Port Scan
🇺🇸 mentality	2026-11-11 08:57:22 UTC · (1 day ago)	Banned due to repeated failed login attempts	Brute-Force SSH
🇩🇪 localhost-admin	2026-11-11 08:50:25 UTC · (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force SSH
🇫🇷 sh97	2026-11-11 08:32:53 UTC · (1 day ago)	ns3140968: SSH Brute Force from 117.232.25.161 at 2026-11-11 14:02:53 IST	Brute-Force SSH
🇦🇺 Telemetry2U.com	2026-11-11 08:31:05 UTC · (1 day ago)	Unauthorized connection attempt to port 22 detected	SSH
🇩🇪 zUnlegit	2026-11-11 06:53:26 UTC · (1 day ago)	2026-11-11T07:51:53.901033+01:00 root260 sshd-session[3574192]: Failed password for root from 117.232.25.161 port 5916 ssh2 2026-11-11T07:52:38.156600+01:00 root260 sshd-session[3587530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more 2026-11-11T07:51:53.901033+01:00 root260 sshd-session[3574192]: Failed password for root from 117.232.25.161 port 5916 ssh2 2026-11-11T07:52:38.156600+01:00 root260 sshd-session[3587530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.232.25.161 user=root 2026-11-11T07:52:40.130012+01:00 root260 sshd-session[3587530]: Failed password for root from 117.232.25.161 port 49108 ssh2 2026-11-11T07:53:23.894254+01:00 root260 sshd-session[3600908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.232.25.161 user=root 2026-11-11T07:53:26.113013+01:00 root260 sshd-session[3600908]: Failed password for root from 117.232.25.161 port 29468 ssh2 ... show less	Brute-Force SSH
🇩🇪 AuthenticHowler	2026-11-11 06:24:30 UTC · (1 day ago)	SSH brute-force: 3 failed attempts. Banned 24h by fail2ban [sshd-ddos]. Log evidence, own hostname redacted: sshd[1662564]: error: kex_exchange_identification: read: Connection reset by peer \| sshd[1662564]: Connection reset by 117.232.25.161 port 40 ... show more SSH brute-force: 3 failed attempts. Banned 24h by fail2ban [sshd-ddos]. Log evidence, own hostname redacted: sshd[1662564]: error: kex_exchange_identification: read: Connection reset by peer \| sshd[1662564]: Connection reset by 117.232.25.161 port 40746 \| sshd[1662584]: Connection closed by authenticating user root 117.232.25.161 port 59392 [preauth] show less	Brute-Force SSH
🇪🇸 el-brujo	2026-11-11 05:42:05 UTC · (1 day ago)	2026-11-11T06:41:22.991747 ns2.elhacker.net proftpd[1509049]: session[1509049] 0.0.0.0 (117.232.25.161[117.232.25.161]): USER root (Login failed): Incorrect password 2026-11-11T06:42:04.877850 ns2.elhacker.net proftpd[1509379]: session[1509379] 0.0.0 ... show more 2026-11-11T06:41:22.991747 ns2.elhacker.net proftpd[1509049]: session[1509049] 0.0.0.0 (117.232.25.161[117.232.25.161]): USER root (Login failed): Incorrect password 2026-11-11T06:42:04.877850 ns2.elhacker.net proftpd[1509379]: session[1509379] 0.0.0.0 (117.232.25.161[117.232.25.161]): USER root (Login failed): Incorrect password ... show less	FTP Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇧 196.3.218.91

🇨🇳 183.222.174.168

🇵🇱 83.22.127.108

🇷🇴 80.94.95.116

🇬🇧 5.252.83.186

🇧🇪 198.235.24.202

🇧🇬 79.124.58.234

🇳🇱 77.67.26.21

🇺🇸 47.35.164.144

🇦🇿 46.32.170.98

🇺🇸 20.80.87.40

🇸🇬 8.222.248.113

🇰🇷 221.161.235.168

🇧🇪 198.235.24.205

🇳🇱 195.178.110.227

🇲🇽 187.241.133.23

🇳🇱 185.218.86.10

🇸🇪 185.122.115.106

🇰🇷 125.141.102.188

🇳🇱 109.160.32.141