Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
1598978915 - 09/01/2020 18:48:35 Host: 116.97.2.49/116.97.2.49 Port: 445 TCP Blocked
2020-09-02 20:38:45
attackspambots
1598978915 - 09/01/2020 18:48:35 Host: 116.97.2.49/116.97.2.49 Port: 445 TCP Blocked
2020-09-02 12:33:30
attack
1598978915 - 09/01/2020 18:48:35 Host: 116.97.2.49/116.97.2.49 Port: 445 TCP Blocked
2020-09-02 05:41:59
Comments on same subnet:
IP Type Details Datetime
116.97.202.87 attack
Trying to log into bitwarden accounts
2023-05-18 23:49:10
116.97.243.38 attackbots
Unauthorized connection attempt from IP address 116.97.243.38 on Port 445(SMB)
2020-08-22 00:41:39
116.97.243.142 attackbotsspam
Unauthorized connection attempt from IP address 116.97.243.142 on Port 445(SMB)
2020-08-17 08:05:22
116.97.221.87 attack
Unauthorized connection attempt detected from IP address 116.97.221.87 to port 445 [T]
2020-08-16 02:50:04
116.97.203.143 attackspam
445/tcp
[2020-08-11]1pkt
2020-08-12 08:01:23
116.97.224.255 attackspambots
1596563799 - 08/04/2020 19:56:39 Host: 116.97.224.255/116.97.224.255 Port: 445 TCP Blocked
2020-08-05 05:55:54
116.97.243.142 attack
Unauthorized connection attempt from IP address 116.97.243.142 on Port 445(SMB)
2020-07-14 06:30:53
116.97.222.199 attackspam
Trying ports that it shouldn't be.
2020-05-10 16:26:40
116.97.210.227 attack
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2020-05-10 03:51:27
116.97.243.118 attack
20/5/6@08:00:09: FAIL: Alarm-Network address from=116.97.243.118
...
2020-05-06 23:45:13
116.97.221.212 attack
Port probing on unauthorized port 9530
2020-05-05 12:44:41
116.97.243.142 attackbotsspam
1586866476 - 04/14/2020 14:14:36 Host: 116.97.243.142/116.97.243.142 Port: 445 TCP Blocked
2020-04-14 21:56:51
116.97.204.126 attackbotsspam
1585626859 - 03/31/2020 05:54:19 Host: 116.97.204.126/116.97.204.126 Port: 445 TCP Blocked
2020-03-31 13:27:51
116.97.203.30 attackbots
Email rejected due to spam filtering
2020-03-10 02:33:27
116.97.214.120 attack
Unauthorized connection attempt from IP address 116.97.214.120 on Port 445(SMB)
2020-03-09 17:50:05
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.97.2.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.97.2.49.			IN	A

;; AUTHORITY SECTION:
.			168	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090101 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 05:41:55 CST 2020
;; MSG SIZE  rcvd: 115
Host info
49.2.97.116.in-addr.arpa domain name pointer dynamic-ip-adsl.viettel.vn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.2.97.116.in-addr.arpa	name = dynamic-ip-adsl.viettel.vn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
75.163.224.102 attackbotsspam
[portscan] tcp/22 [SSH]
*(RWIN=65535)(08050931)
2019-08-05 19:27:58
31.146.212.220 attack
[portscan] tcp/23 [TELNET]
*(RWIN=13175)(08050931)
2019-08-05 18:40:55
180.250.189.39 attackbotsspam
[SMB remote code execution attempt: port tcp/445]
*(RWIN=8192)(08050931)
2019-08-05 19:36:38
198.101.15.92 attackspambots
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(08050931)
2019-08-05 19:21:20
66.96.237.145 attackbotsspam
[SMB remote code execution attempt: port tcp/445]
*(RWIN=8192)(08050931)
2019-08-05 18:51:26
27.20.131.78 attack
[portscan] tcp/23 [TELNET]
*(RWIN=2416)(08050931)
2019-08-05 19:08:10
203.202.250.155 attack
[portscan] tcp/23 [TELNET]
*(RWIN=14600)(08050931)
2019-08-05 19:33:24
1.172.78.91 attack
[portscan] tcp/23 [TELNET]
*(RWIN=31185)(08050931)
2019-08-05 19:09:42
61.224.190.222 attackspam
[portscan] tcp/23 [TELNET]
*(RWIN=23467)(08050931)
2019-08-05 18:51:43
91.235.75.129 attack
[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(08050931)
2019-08-05 19:02:48
201.55.91.6 attack
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 2 time(s)]
*(RWIN=1024)(08050931)
2019-08-05 19:34:17
85.18.240.55 attackspambots
[SMB remote code execution attempt: port tcp/445]
[scan/connect: 3 time(s)]
*(RWIN=8192)(08050931)
2019-08-05 19:04:11
62.63.200.23 attackspambots
[portscan] tcp/23 [TELNET]
*(RWIN=14600)(08050931)
2019-08-05 19:05:42
68.183.1.113 attack
[portscan] tcp/22 [SSH]
*(RWIN=65535)(08050931)
2019-08-05 19:28:50
80.19.251.81 attackspam
[portscan] tcp/23 [TELNET]
*(RWIN=38582)(08050931)
2019-08-05 19:17:41

Recently Reported IPs

254.74.153.66 129.213.38.184 96.172.147.168 149.130.185.184
185.20.105.109 15.248.82.158 64.57.238.177 138.251.203.165
124.29.115.85 166.183.96.203 49.232.150.228 189.146.197.116
49.235.209.206 175.111.129.159 59.126.169.135 5.248.249.80
116.109.164.175 5.170.166.158 14.129.155.3 87.123.85.44