JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.252.18.114

Recent Activity

Abuse Confidence Score

100% Critical

75 reports

67 reporters · latest 4 minutes ago

ISP: CDMA Project, BSNL New Delhi
Usage Type: Fixed Line ISP
ASN: AS9829
Domain Name: bsnl.in
Country: 🇮🇳 India
City: Morwa, Bihar

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

75 from 67 distinct reporters

First reported

July 8th 2021

Most recent report

4 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 17 🇫🇷 France 12 🇺🇸 United States of America 9

Most common categories SSH 68 Brute-Force 67 Port Scan 3 Hacking 3 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 pr0vieh	2026-11-14 01:45:14 UTC · (4 minutes ago)	2026-11-14T02:44:33.853302+01:00 Linux01 sshd-session[43671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-14T02:44:35.700245+01:00 Linux01 sshd-session[43671]: Failed passw ... show more 2026-11-14T02:44:33.853302+01:00 Linux01 sshd-session[43671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-14T02:44:35.700245+01:00 Linux01 sshd-session[43671]: Failed password for root from 117.252.18.114 port 28678 ssh2 2026-11-14T02:44:42.239289+01:00 Linux01 sshd-session[44000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-14T02:44:44.346792+01:00 Linux01 sshd-session[44000]: Failed password for root from 117.252.18.114 port 7531 ssh2 2026-11-14T02:44:50.393605+01:00 Linux01 sshd-session[44275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-14T02:44:52.227803+01:00 Linux01 sshd-session[44275]: Failed password for root from 117.252.18.114 port 54098 ssh2 2026-11-14T02:44:58.640457+01:00 Linux01 sshd-session[44426]: pam_unix(sshd:auth): authentication failur ... show less	Brute-Force SSH
Anonymous	2026-11-14 01:44:47 UTC · (5 minutes ago)	Nov 14 01:44:35 sftp-cognizant-san-jose-1 sshd[1329855]: Failed password for root from 117.252.18.114 port 11136 ssh2 Nov 14 01:44:44 sftp-cognizant-san-jose-1 sshd[1329857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more Nov 14 01:44:35 sftp-cognizant-san-jose-1 sshd[1329855]: Failed password for root from 117.252.18.114 port 11136 ssh2 Nov 14 01:44:44 sftp-cognizant-san-jose-1 sshd[1329857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 01:44:46 sftp-cognizant-san-jose-1 sshd[1329857]: Failed password for root from 117.252.18.114 port 63251 ssh2 ... show less	Brute-Force SSH
🇳🇱 walkerit.ch	2026-11-14 01:35:38 UTC · (14 minutes ago)	Nov 14 02:35:24 srv-ubuntu-dev3 sshd[1613449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 02:35:26 srv-ubuntu-dev3 sshd[1613449]: Failed password for root from 117.252.18.1 ... show more Nov 14 02:35:24 srv-ubuntu-dev3 sshd[1613449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 02:35:26 srv-ubuntu-dev3 sshd[1613449]: Failed password for root from 117.252.18.114 port 31154 ssh2 Nov 14 02:35:28 srv-ubuntu-dev3 sshd[1613449]: Connection closed by authenticating user root 117.252.18.114 port 31154 [preauth] Nov 14 02:35:35 srv-ubuntu-dev3 sshd[1613471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 02:35:38 srv-ubuntu-dev3 sshd[1613471]: Failed password for root from 117.252.18.114 port 8079 ssh2 ... show less	Brute-Force SSH
🇺🇸 mjerezarjona	2026-11-14 01:16:56 UTC · (32 minutes ago)	SSH brute-force login attempts, detected by fail2ban	Brute-Force SSH
🇫🇮 Hoosk	2026-11-14 00:35:54 UTC · (1 hour ago)	SSH: Unauthorized connection attempts detected. Reported by fail2ban.	Brute-Force SSH
🇧🇬 OHOST.BG	2026-11-14 00:26:31 UTC · (1 hour ago)	Nov 14 02:26:13 mirrors sshd[3204316]: Failed password for root from 117.252.18.114 port 45378 ssh2 Nov 14 02:26:19 mirrors sshd[3204518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=ro ... show more Nov 14 02:26:13 mirrors sshd[3204316]: Failed password for root from 117.252.18.114 port 45378 ssh2 Nov 14 02:26:19 mirrors sshd[3204518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 02:26:22 mirrors sshd[3204518]: Failed password for root from 117.252.18.114 port 60871 ssh2 Nov 14 02:26:28 mirrors sshd[3204816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root Nov 14 02:26:30 mirrors sshd[3204816]: Failed password for root from 117.252.18.114 port 1119 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-14 00:10:49 UTC · (1 hour ago)	2026-11-14T01:10:37.047747 prodWEB sshd-session[8281]: Connection from 117.252.18.114 port 58167 on 57.128.10.223 port 22 rdomain "" 2026-11-14T01:10:41.255495 prodWEB sshd-session[8281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more 2026-11-14T01:10:37.047747 prodWEB sshd-session[8281]: Connection from 117.252.18.114 port 58167 on 57.128.10.223 port 22 rdomain "" 2026-11-14T01:10:41.255495 prodWEB sshd-session[8281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-14T01:10:43.496384 prodWEB sshd-session[8281]: Failed password for root from 117.252.18.114 port 58167 ssh2 ... show less	Brute-Force SSH
🇵🇹 WebTejo	2026-11-13 20:50:06 UTC · (4 hours ago)	Detected multiple authentication failures and invalid user attempts from IP address 117.252.18.114 on [PT] Lis-4 Node.	Brute-Force SSH
🇩🇪 OiledAmoeba	2026-11-13 19:24:45 UTC · (6 hours ago)	2026-11-13T20:24:42.676192+01:00 mout.ruhnke.cloud sshd-session[841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T20:24:44.033386+01:00 mout.ruhnke.cloud sshd-session[84 ... show more 2026-11-13T20:24:42.676192+01:00 mout.ruhnke.cloud sshd-session[841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T20:24:44.033386+01:00 mout.ruhnke.cloud sshd-session[841]: Failed password for root from 117.252.18.114 port 6258 ssh2 show less	Brute-Force SSH
🇳🇴 thorn5011	2026-11-13 19:15:32 UTC · (6 hours ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-13T19:15:24Z and 2026-11-13T19:15:31Z	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-11-13 18:25:02 UTC · (7 hours ago)	Activity from blacklisted IP	Hacking
🇫🇷 eszfrigyes.com	2026-11-13 18:16:44 UTC · (7 hours ago)	2026-11-13T19:16:33.475439+01:00 mail sshd[489417]: Failed password for root from 117.252.18.114 port 12136 ssh2 2026-11-13T19:16:41.738178+01:00 mail sshd[489420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... show more 2026-11-13T19:16:33.475439+01:00 mail sshd[489417]: Failed password for root from 117.252.18.114 port 12136 ssh2 2026-11-13T19:16:41.738178+01:00 mail sshd[489420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T19:16:43.762847+01:00 mail sshd[489420]: Failed password for root from 117.252.18.114 port 38163 ssh2 ... show less	Brute-Force SSH
🇩🇪 pr0vieh	2026-11-13 17:45:29 UTC · (8 hours ago)	2026-11-13T18:44:53.606350+01:00 Linux04 sshd-session[64196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T18:44:55.412987+01:00 Linux04 sshd-session[64196]: Failed passw ... show more 2026-11-13T18:44:53.606350+01:00 Linux04 sshd-session[64196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T18:44:55.412987+01:00 Linux04 sshd-session[64196]: Failed password for root from 117.252.18.114 port 15184 ssh2 2026-11-13T18:45:02.476469+01:00 Linux04 sshd-session[64433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T18:45:04.281992+01:00 Linux04 sshd-session[64433]: Failed password for root from 117.252.18.114 port 21980 ssh2 2026-11-13T18:45:09.646218+01:00 Linux04 sshd-session[64899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T18:45:11.973202+01:00 Linux04 sshd-session[64899]: Failed password for root from 117.252.18.114 port 56458 ssh2 2026-11-13T18:45:17.008507+01:00 Linux04 sshd-session[65142]: pam_unix(sshd:auth): authentication failu ... show less	Brute-Force SSH
🇫🇮 EndCore Group	2026-11-13 17:29:10 UTC · (8 hours ago)	2026-11-13T20:29:00.177399FI-4549.hosted-by.shinomiya-hosting.com sshd[847477]: Failed password for root from 117.252.18.114 port 35962 ssh2 2026-11-13T20:29:04.605658FI-4549.hosted-by.shinomiya-hosting.com sshd[847479]: pam_unix(sshd:auth): authenti ... show more 2026-11-13T20:29:00.177399FI-4549.hosted-by.shinomiya-hosting.com sshd[847477]: Failed password for root from 117.252.18.114 port 35962 ssh2 2026-11-13T20:29:04.605658FI-4549.hosted-by.shinomiya-hosting.com sshd[847479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.18.114 user=root 2026-11-13T20:29:06.414300FI-4549.hosted-by.shinomiya-hosting.com sshd[847479]: Failed password for root from 117.252.18.114 port 62005 ssh2 ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-11-13 16:49:10 UTC · (9 hours ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.	Brute-Force

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.153.240.188

🇺🇸 195.184.76.141

🇩🇪 167.94.146.50

🇩🇪 167.94.146.46

🇩🇪 165.232.74.147

🇺🇸 162.216.149.176

🇦🇷 149.78.153.16

🇫🇮 147.185.133.163

🇨🇳 123.113.11.10

🇮🇳 115.246.14.28

🇦🇹 81.16.152.2

🇳🇱 77.239.124.74

🇳🇱 77.239.124.70

🇺🇸 68.183.124.108

🇺🇸 66.132.186.203

🇪🇸 45.135.198.2

🇺🇸 35.254.29.218

🇧🇷 2804:7f0:b542:3092:1bfa:27d2:3781:6a6a

🇹🇼 198.235.24.111

🇿🇦 197.95.26.76