JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.245.250.223

Neutral Activity

Abuse Confidence Score

0% Low Risk

99 reports

73 reporters · latest 4 months ago

ISP: BSNL GSM North Zone, O/o Sr GM (CMTS), NC, Chandigarh
Usage Type: Fixed Line ISP
ASN: AS9829
Domain Name: bsnl.co.in
Country: 🇮🇳 India
City: Churu, Rajasthan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

117.245.250.223 has been reported 99 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

99 from 73 distinct reporters

First reported

December 30th 2024

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-22 05:25:06 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 gooko	2026-05-11 13:42:45 UTC · (5 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇧🇷 helix	2026-05-11 11:19:08 UTC · (5 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇨🇿 lp	2026-04-20 16:16:40 UTC · (6 months ago)	SSH Brute force: 25 attempts were recorded from 117.245.250.223 2026-04-18T04:12:22+02:00 Disconnected from authenticating user root 117.245.250.223 port 58946 [preauth] 2026-04-18T04:15:25+02:00 Disconnected from authenticating user root 117.245.250 ... show more SSH Brute force: 25 attempts were recorded from 117.245.250.223 2026-04-18T04:12:22+02:00 Disconnected from authenticating user root 117.245.250.223 port 58946 [preauth] 2026-04-18T04:15:25+02:00 Disconnected from authenticating user root 117.245.250.223 port 42028 [preauth] 2026-04-18T04:17:22+02:00 Invalid user test9 from 117.245.250.223 port 43911 2026-04-18T04:19:15+02:00 Invalid user tester from 117.245.250.223 port 45786 2026-04-18T04:21:02+02:00 Disconnected from authenticating user root 117.245.250.223 port 47660 [preauth] 2026-04-18T04:22:53+02:00 Invalid user user from 117.245.250.223 port 49538 2026-04-18T04:24:47+02:00 Invalid user frappe from 117.245.250.223 port 51420 2026-04-18T04:26:31+02:00 Invalid user ubuntu from 117.245.250.223 port 53281 2026-04-18T04:28:17+02:00 Disconnected from authenticating user root 117.245.250.223 port 55139 [preauth] 2026-04-18T04:30:12+02:00 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-18 23:55:35 UTC · (6 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/117.245.250.223	SSH
Anonymous	2026-04-18 13:46:08 UTC · (6 months ago)	attempts to hack passwords	SSH
🇫🇷 guille-rodriguez	2026-04-18 13:25:20 UTC · (6 months ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSO)	Brute-Force SSH
🇺🇸 frankpanduh.com	2026-04-18 12:55:57 UTC · (6 months ago)	Apr 18 05:40:57 panduh sshd[212520]: Invalid user debianuser from 117.245.250.223 port 51686 Apr 18 05:48:38 panduh sshd[214293]: Invalid user deepak from 117.245.250.223 port 59276 Apr 18 05:54:09 panduh sshd[215634]: Invalid user ali from 117.245.2 ... show more Apr 18 05:40:57 panduh sshd[212520]: Invalid user debianuser from 117.245.250.223 port 51686 Apr 18 05:48:38 panduh sshd[214293]: Invalid user deepak from 117.245.250.223 port 59276 Apr 18 05:54:09 panduh sshd[215634]: Invalid user ali from 117.245.250.223 port 36742 Apr 18 05:55:56 panduh sshd[216044]: Invalid user ubuntu from 117.245.250.223 port 38630 ... show less	Brute-Force SSH
🇨🇦 hpg	2026-04-18 12:49:14 UTC · (6 months ago)	62 invalid SSH login attempts from 117.245.250.223 in the last 9.8 hours	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-18 12:30:38 UTC · (6 months ago)	2026-04-18T13:21:56.337858+01:00 mail.srvfarm.net sshd-session[3083932]: Invalid user frappe from 117.245.250.223 port 37238 2026-04-18T13:21:56.605592+01:00 mail.srvfarm.net sshd-session[3083932]: Disconnected from invalid user frappe 117.245.250.22 ... show more 2026-04-18T13:21:56.337858+01:00 mail.srvfarm.net sshd-session[3083932]: Invalid user frappe from 117.245.250.223 port 37238 2026-04-18T13:21:56.605592+01:00 mail.srvfarm.net sshd-session[3083932]: Disconnected from invalid user frappe 117.245.250.223 port 37238 [preauth] 2026-04-18T13:26:48.432697+01:00 mail.srvfarm.net sshd-session[3086882]: Disconnected from authenticating user root 117.245.250.223 port 36394 [preauth] 2026-04-18T13:28:44.918169+01:00 mail.srvfarm.net sshd-session[3088139]: Disconnected from authenticating user root 117.245.250.223 port 38298 [preauth] 2026-04-18T13:30:37.108239+01:00 mail.srvfarm.net sshd-session[3089456]: Disconnected from authenticating user root 117.245.250.223 port 40202 [preauth] show less	Brute-Force
🇷🇺 WebKingAlex	2026-04-18 12:30:33 UTC · (6 months ago)	Fail2Ban cowrie banned 117.245.250.223	Brute-Force SSH
🇳🇱 majo-it.nl	2026-04-18 12:25:11 UTC · (6 months ago)	Apr 18 12:25:08 fail2ban sshd[3446310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 Apr 18 12:25:10 fail2ban sshd[3446310]: Failed password for invalid user frappe from 117.245.250.223 port ... show more Apr 18 12:25:08 fail2ban sshd[3446310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 Apr 18 12:25:10 fail2ban sshd[3446310]: Failed password for invalid user frappe from 117.245.250.223 port 55115 ssh2 ... show less	Brute-Force SSH
🇩🇪 laotuo	2026-04-18 12:13:58 UTC · (6 months ago)	Apr 18 14:13:55 h2930838 sshd[20486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 user=root Apr 18 14:13:57 h2930838 sshd[20486]: Failed password for invalid user root from 117.245.250.223 ... show more Apr 18 14:13:55 h2930838 sshd[20486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 user=root Apr 18 14:13:57 h2930838 sshd[20486]: Failed password for invalid user root from 117.245.250.223 port 46477 ssh2 show less	Brute-Force SSH
🇩🇪 laotuo	2026-04-18 11:53:34 UTC · (6 months ago)	Apr 18 13:53:32 h2930838 sshd[20261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 Apr 18 13:53:34 h2930838 sshd[20261]: Failed password for invalid user ubuntu from 117.245.250.223 port 547 ... show more Apr 18 13:53:32 h2930838 sshd[20261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 Apr 18 13:53:34 h2930838 sshd[20261]: Failed password for invalid user ubuntu from 117.245.250.223 port 54744 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-18 11:39:43 UTC · (6 months ago)	(sshd) Failed SSH login from 117.245.250.223 (-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 18 11:35:05 24025 sshd[13645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117. ... show more (sshd) Failed SSH login from 117.245.250.223 (-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 18 11:35:05 24025 sshd[13645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 user=root Apr 18 11:35:08 24025 sshd[13645]: Failed password for root from 117.245.250.223 port 45322 ssh2 Apr 18 11:37:33 24025 sshd[13812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 user=root Apr 18 11:37:34 24025 sshd[13812]: Failed password for root from 117.245.250.223 port 51246 ssh2 Apr 18 11:39:27 24025 sshd[13954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.245.250.223 user=root show less	Brute-Force SSH

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 159.89.1.61

🇫🇷 91.231.89.159

🇳🇱 45.74.28.254

🇨🇦 216.183.135.101

🇨🇦 216.130.82.85

🇮🇩 202.158.5.71

🇺🇸 165.22.136.39

🇨🇳 121.224.5.228

🇯🇵 111.216.27.184

🇨🇳 110.179.80.106

🇺🇸 104.152.52.129

🇳🇱 85.137.52.38

🇳🇱 77.239.124.175

🇳🇱 45.148.10.121

🇮🇶 37.77.55.56

🇺🇸 24.197.165.87

🇨🇳 223.70.246.46

🇨🇳 218.79.234.151

🇨🇦 216.110.226.217

🇪🇸 154.58.4.13