Significant Threat
IP 117.211.76.94 identified as significant threat (8/10) from 5 events.
Multiple malicious indicators detected. Confidence level: 73%.
More threatening than 92% of monitored IPs
IP Address
117.211.76.94
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
IN
Location
National Internet Backbon...
ASN 9829
5
Reports
Mixed
Data Source
Threat Categories
SSH
5
Brute-Force
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
27. October 2026
Last Activity
27. October 2026
Recent (7 days)
3 incidents
Moderate Network Risk
The network hosting this IP (ASN 9829, operated by National Internet Backbone) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
73%
High Confidence
Confidence History
22. Apr 2026 - 27. Oct 2026
73%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| New | Brute-Force SSH | Honeypot | 75% |
| New | Brute-Force SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 117.211.76.94
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS9829
- ISP
- National Internet Backbone
DNS Information
- Reverse DNS
- static.ftth.jrt.117.211.76.94.bsnl.in
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 5
- First Reported
- 22 Apr 2026
- Last Reported
- 27 Oct 2026, 16:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9829
National Internet Backbone
IN
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
1,498
Total IPs Monitored
3,395
Total Reports
2.3
Reports per IP
Network Context
This IP address belongs to National Internet Backbone (AS9829), which manages 1,498 IP addresses in our monitoring system. Out of these, 3,395 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,285,140 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
5
avg: 7
-
Network Comparison
Compared against 9,541 IPs in ASN 9829
Threat Level
8/10
network avg: 6.7
+
Total Reports
5
network avg: 2
++
Network National Internet Backbone has overall threat level 5/10
Geographic Comparison
Compared against 102,266 IPs in IN
Threat Level
8/10
country avg: 6.6
+
Total Reports
5
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 Oct 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
5
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,171,549 threat incidents tracked globally • Last 24h: 30,548 Logs
FEED
Top Threat Sources
-
01
Brazil258,308 22% -
02
United States198,400 16.9% -
03
India102,266 8.7%
-
04
China49,421 4.2% -
05
Argentina41,856 3.6% -
06
SC29,405 2.5% -
07
Mexico27,338 2.3% -
08
Russia26,376 2.3% -
09
Colombia23,990 2% -
10
Germany22,589 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
82%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
117.218.75.251
10/10
Confidence
98%
Reports
21
Location
IN
IN
59.97.21.114
10/10
Confidence
95%
Reports
15
Location
IN
IN
117.250.69.10
8/10
Confidence
91%
Reports
14
Location
IN
IN
117.216.47.197
8/10
Confidence
85%
Reports
22
Location
IN
IN
117.247.193.27
10/10
Confidence
85%
Reports
21
Location
IN
IN
59.95.96.182
10/10
Confidence
84%
Reports
28
Location
IN
IN
117.216.214.91
8/10
Confidence
83%
Reports
26
Location
IN
IN
117.242.71.32
8/10
Confidence
83%
Reports
14
Location
IN
IN
117.236.124.166
10/10
Confidence
81%
Reports
140
Location
IN
IN
210.212.136.3
10/10
Confidence
81%
Reports
64
Location
IN
IN
117.220.14.199
8/10
Confidence
80%
Reports
24
Location
IN
IN
61.2.72.172
8/10
Confidence
80%
Reports
11
Location
IN
IN
210.212.97.243
8/10
Confidence
77%
Reports
44
Location
IN
IN
117.213.202.41
8/10
Confidence
77%
Reports
14
Location
IN
IN
117.250.237.194
10/10
Confidence
76%
Reports
47
Location
IN
IN
61.0.226.100
8/10
Confidence
76%
Reports
32
Location
IN
IN
117.217.127.100
8/10
Confidence
76%
Reports
29
Location
IN
IN
117.203.246.44
10/10
Confidence
76%
Reports
15
Location
IN
IN
117.211.189.3
10/10
Confidence
76%
Reports
8
Location
IN
IN
117.242.44.142
8/10
Confidence
75%
Reports
34
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
139.59.83.112
10/10
Confidence
100%
Reports
53
ISP
DigitalOcean, LLC
121.242.232.147
10/10
Confidence
100%
Reports
42
ISP
TATA Communicat...
103.149.197.34
10/10
Confidence
100%
Reports
35
ISP
Net Access Inte...
35.244.32.167
10/10
Confidence
100%
Reports
27
ISP
Google LLC
103.100.150.109
8/10
Confidence
100%
Reports
14
ISP
Indian Institut...
103.187.211.188
10/10
Confidence
99%
Reports
15
ISP
SINGH TELEVENTU...
103.167.73.181
10/10
Confidence
99%
Reports
14
ISP
Lazygone Networ...
103.192.199.245
10/10
Confidence
98%
Reports
32
ISP
NEEVAI SUPERCLO...
117.218.75.251
10/10
Confidence
98%
Reports
21
ISP
National Intern...
164.100.214.91
8/10
Confidence
98%
Reports
15
ISP
National Inform...
110.235.235.222
10/10
Confidence
98%
Reports
13
ISP
Excitel Broadba...
182.70.255.242
10/10
Confidence
97%
Reports
32
ISP
Bharti Airtel L...
2a02:4780:12:4d3d::1
10/10
Confidence
97%
Reports
14
ISP
Hostinger Inter...
175.101.21.96
8/10
Confidence
97%
Reports
14
ISP
Excellmedia
103.171.117.57
8/10
Confidence
97%
Reports
14
ISP
INCUBIX UNIFIED...
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
73%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
103.52.37.34
10/10
Confidence
73%
Reports
81
Location
IN
IN
91.230.168.7
10/10
Confidence
73%
Reports
360
Location
US
US
91.230.168.4
8/10
Confidence
73%
Reports
373
Location
US
US
2a01:4f8:c012:4640::1
10/10
Confidence
73%
Reports
51,637
Location
DE
DE
147.185.132.12
8/10
Confidence
73%
Reports
403
Location
US
US
34.159.221.79
8/10
Confidence
73%
Reports
6
Location
DE
DE
222.167.114.188
6/10
Confidence
73%
Reports
11
Location
US
US
149.19.247.226
6/10
Confidence
73%
Reports
11
Location
US
US
45.142.193.239
10/10
Confidence
73%
Reports
77
Location
RO
RO
64.23.214.73
8/10
Confidence
73%
Reports
13,157
Location
US
US
209.38.70.156
8/10
Confidence
73%
Reports
13,033
Location
US
US
91.230.168.25
10/10
Confidence
73%
Reports
341
Location
US
US
20.65.217.249
8/10
Confidence
73%
Reports
6
Location
US
US
82.102.18.118
8/10
Confidence
73%
Reports
312
Location
FR
FR
94.231.206.108
8/10
Confidence
73%
Reports
42
Location
CN
CN