JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

116.97.240.147

Neutral Activity

Abuse Confidence Score

0% Low Risk

77 reports

51 reporters · latest 1 year ago

ISP: Viettel Group
Usage Type: Fixed Line ISP
ASN: AS7552
Domain Name: viettel.com.vn
Country: 🇻🇳 Viet Nam
City: Hanoi, Hanoi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

116.97.240.147 has been reported 77 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

77 from 51 distinct reporters

First reported

August 8th 2023

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2025-03-24 10:34:12 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from VN. Action taken: BLOCK ASN: 7552 (VIETEL-AS-AP Viettel Group) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-03-24T09:52:02Z UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/6 ... show more Triggered Cloudflare WAF (l7ddos) from VN. Action taken: BLOCK ASN: 7552 (VIETEL-AS-AP Viettel Group) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-03-24T09:52:02Z UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-03-24 03:20:43 (1 year ago)	Mar 24 00:20:43 logopedia-1vcpu-1gb-nyc1-01 sshd[2466254]: Failed password for root from 116.97.240.147 port 32816 ssh2 ...	Brute-Force SSH
🇩🇪 dwmp	2025-03-23 23:19:31 (1 year ago)	2025-03-24T00:08:29.011717news0.dwmp.it sshd[24978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root 2025-03-24T00:08:31.329077news0.dwmp.it sshd[24978]: Failed password for invalid us ... show more 2025-03-24T00:08:29.011717news0.dwmp.it sshd[24978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root 2025-03-24T00:08:31.329077news0.dwmp.it sshd[24978]: Failed password for invalid user root from 116.97.240.147 port 40642 ssh2 2025-03-24T00:19:28.704531news0.dwmp.it sshd[26679]: User root from 116.97.240.147 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 olen.net	2025-03-23 02:45:14 (1 year ago)	Fail2Ban - lupus: Brute-force SSH server ...	Brute-Force SSH
Anonymous	2025-03-23 01:06:01 (1 year ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force
🇺🇸 Ssmidge	2025-03-22 21:33:59 (1 year ago)	Mar 22 17:29:10 vps-6 sshd[1848098]: Failed password for root from 116.97.240.147 port 53371 ssh2 Mar 22 17:33:56 vps-6 sshd[1848838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root M ... show more Mar 22 17:29:10 vps-6 sshd[1848098]: Failed password for root from 116.97.240.147 port 53371 ssh2 Mar 22 17:33:56 vps-6 sshd[1848838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root Mar 22 17:33:58 vps-6 sshd[1848838]: Failed password for root from 116.97.240.147 port 45746 ssh2 ... show less	Brute-Force SSH
🇺🇸 Bro Charlie	2025-03-22 14:10:16 (1 year ago)	2025-03-22T22:10:13.288606+08:00 localhost sshd[3591173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root 2025-03-22T22:10:15.510405+08:00 localhost sshd[3591173]: Failed password for ... show more 2025-03-22T22:10:13.288606+08:00 localhost sshd[3591173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.97.240.147 user=root 2025-03-22T22:10:15.510405+08:00 localhost sshd[3591173]: Failed password for root from 116.97.240.147 port 56285 ssh2 ... show less	Brute-Force SSH
🇩🇪 maxxsense	2025-03-22 08:29:06 (1 year ago)	(sshd) Failed SSH login from 116.97.240.147 (dynamic-adsl.viettel.vn)	Brute-Force SSH
🇨🇭 backslash	2025-03-16 06:31:51 (1 year ago)		Bad Web Bot
Anonymous	2025-03-14 01:03:44 (1 year ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-03-10 14:11:23 (1 year ago)	Fail2Ban: IP flagged for web exploits and DDoS attack attempts (Categories 4, 21).	DDoS Attack Web App Attack
🇺🇸 sterile.network	2025-03-07 02:57:15 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from VN. Action taken: MANAGED_CHALLENGE ASN: 7552 (VIETEL-AS-AP Viettel Group) Protocol: HTTP/1.1 (GET method) Endpoint: /login Timestamp: 2025-03-07T02:34:39Z Ray ID: 91c6b1eb19c3833f UA: Mozilla/5.0 (iPhone; CPU i ... show more Triggered Cloudflare WAF (l7ddos) from VN. Action taken: MANAGED_CHALLENGE ASN: 7552 (VIETEL-AS-AP Viettel Group) Protocol: HTTP/1.1 (GET method) Endpoint: /login Timestamp: 2025-03-07T02:34:39Z Ray ID: 91c6b1eb19c3833f UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1 show less	Bad Web Bot
🇲🇾 syokadmin	2025-02-12 00:13:34 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 116.97.240.147 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 2 in the last 3600 secs	Brute-Force
🇫🇷 Hippoline	2025-01-30 02:23:14 (1 year ago)	Jan 30 03:21:04 local wp(XXXX-A)[24672]: Authentication attempt for unknown user admin from ::ffff:116.97.240.147 ...	Brute-Force Web App Attack
🇬🇧 Hobby Bob	2025-01-13 04:20:34 (1 year ago)	Jan 13 04:20:33 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=116.97.240.147, lip=X.X.X.X session=	Port Scan Hacking

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 192.248.150.180

🇩🇪 185.168.30.32

🇨🇳 182.61.49.221

🇧🇹 163.227.22.98

🇭🇰 104.208.108.166

🇳🇱 77.67.26.146

🇺🇸 73.1.231.102

🇺🇸 66.132.159.41

🇺🇸 20.119.83.119

🇺🇸 205.210.31.11

🇺🇸 185.191.171.11

🇫🇷 185.177.72.13

🇬🇧 159.65.18.197

🇨🇳 119.96.159.237

🇮🇩 103.193.179.139

🇨🇦 85.217.149.16

🇫🇷 82.127.118.117

🇳🇱 80.82.77.139

🇩🇪 64.226.71.244

🇺🇸 54.196.159.21