Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Guangzhou

Region: Guangdong

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '113.44.0.0 - 113.47.255.255'

% Abuse contact for '113.44.0.0 - 113.47.255.255' is 'ipas@cnnic.cn'

inetnum:        113.44.0.0 - 113.47.255.255
netname:        HWCSNET
descr:          Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
descr:          No.2018 Xuegang Road,Bantian street,Longgang District,
descr:          Shenzhen,Guangdong Province, 518129 P.R.China
country:        CN
admin-c:        LL3172-AP
tech-c:         GX1759-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-lower:      MAINT-CNNIC-AP
mnt-routes:     MAINT-CNNIC-AP
mnt-irt:        IRT-CNNIC-CN
last-modified:  2022-04-18T05:46:48Z
source:         APNIC

irt:            IRT-CNNIC-CN
address:        Beijing, China
e-mail:         ipas@cnnic.cn
abuse-mailbox:  ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
auth:           # Filtered
remarks:        Please note that CNNIC is not an ISP and is not
remarks:        empowered to investigate complaints of network abuse.
remarks:        Please contact the tech-c or admin-c of the network.
remarks:        ipas@cnnic.cn is invalid
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-17T23:08:37Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Gui xiaowei
address:        HUAWEI CLOUD Data Center, Jiaoxinggong Road, Qianzhong Avenue, Gui'an New District, Guizhou Province
country:        CN
phone:          +86-18566251984
e-mail:         guixiaowei@huawei.com
nic-hdl:        GX1759-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2022-04-18T05:32:41Z
source:         APNIC

person:         Liu Liqun
address:        HUAWEI CLOUD Data Center, Jiaoxinggong Road, Qianzhong Avenue, Gui'an New District, Guizhou Province
country:        CN
phone:          +86-13360099887
e-mail:         liuliqun2@huawei.com
nic-hdl:        LL3172-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2022-04-18T05:33:15Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.45.242.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.45.242.23.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026092201 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 06:30:03 CST 2026
;; MSG SIZE  rcvd: 106
Host info
23.242.45.113.in-addr.arpa domain name pointer ecs-113-45-242-23.compute.hwclouds-dns.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
23.242.45.113.in-addr.arpa	name = ecs-113-45-242-23.compute.hwclouds-dns.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
41.92.107.180 attackbotsspam
Sep  3 18:42:22 mellenthin postfix/smtpd[19910]: NOQUEUE: reject: RCPT from unknown[41.92.107.180]: 554 5.7.1 Service unavailable; Client host [41.92.107.180] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.92.107.180; from= to= proto=ESMTP helo=<[41.92.107.180]>
2020-09-05 04:21:38
118.76.188.43 attack
Portscan detected
2020-09-05 04:28:09
218.241.202.58 attack
Sep  4 16:24:26 ws12vmsma01 sshd[45852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.202.58 
Sep  4 16:24:26 ws12vmsma01 sshd[45852]: Invalid user has from 218.241.202.58
Sep  4 16:24:28 ws12vmsma01 sshd[45852]: Failed password for invalid user has from 218.241.202.58 port 36438 ssh2
...
2020-09-05 04:19:39
118.89.102.242 attackbots
Sep  4 19:54:09 l03 sshd[3985]: Invalid user simona from 118.89.102.242 port 32804
...
2020-09-05 04:34:47
23.224.37.18 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 04:12:00
51.210.166.13 attackspam
Sep  3 18:23:27 mxgate1 postfix/postscreen[14653]: CONNECT from [51.210.166.13]:40689 to [176.31.12.44]:25
Sep  3 18:23:27 mxgate1 postfix/dnsblog[14763]: addr 51.210.166.13 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 18:23:33 mxgate1 postfix/postscreen[14653]: DNSBL rank 2 for [51.210.166.13]:40689
Sep  3 18:23:33 mxgate1 postfix/tlsproxy[14915]: CONNECT from [51.210.166.13]:40689
Sep x@x
Sep  3 18:23:33 mxgate1 postfix/postscreen[14653]: DISCONNECT [51.210.166.13]:40689
Sep  3 18:23:33 mxgate1 postfix/tlsproxy[14915]: DISCONNECT [51.210.166.13]:40689


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.210.166.13
2020-09-05 04:39:58
222.186.175.216 attackspambots
Sep  4 22:48:04 server sshd[20196]: Failed none for root from 222.186.175.216 port 55924 ssh2
Sep  4 22:48:06 server sshd[20196]: Failed password for root from 222.186.175.216 port 55924 ssh2
Sep  4 22:48:11 server sshd[20196]: Failed password for root from 222.186.175.216 port 55924 ssh2
2020-09-05 04:49:50
141.156.198.128 attack
Sep  3 18:13:45 kunden sshd[19183]: Address 141.156.198.128 maps to pool-141-156-198-128.washdc.fios.verizon.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep  3 18:13:45 kunden sshd[19183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.156.198.128  user=r.r
Sep  3 18:13:47 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:49 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:52 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:54 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:57 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:59 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:59 kunden sshd[19183]: PAM 5 more authentication failu........
-------------------------------
2020-09-05 04:15:30
172.81.239.252 attack
" "
2020-09-05 04:39:09
111.229.39.146 attack
2020-08-13 04:06:55,512 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 111.229.39.146
2020-08-13 04:36:25,244 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 111.229.39.146
2020-08-13 05:05:59,161 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 111.229.39.146
2020-08-13 05:23:33,364 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 111.229.39.146
2020-08-13 05:40:52,421 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 111.229.39.146
...
2020-09-05 04:27:52
185.220.102.240 attackspambots
Sep  4 21:04:44 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:47 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:50 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:52 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
...
2020-09-05 04:24:33
123.180.60.235 attack
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: connect from unknown[123.180.60.235]
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: lost connection after EHLO from unknown[123.180.60.235]
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: disconnect from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: connect from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: lost connection after CONNECT from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: disconnect from unknown[123.180.60.235]
Sep  3 17:39:15 nirvana postfix/smtpd[25407]: connect from unknown[123.180.60.235]
Sep  3 17:39:15 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SASL LOGIN authentication failed: authentication failure
Sep  3 17:39:17 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SASL LOGIN authentication failed: authentication failure
Sep  3 17:39:19 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SA........
-------------------------------
2020-09-05 04:11:45
197.248.10.108 attackspam
Sep  3 18:26:04 gamehost-one sshd[22697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.10.108 
Sep  3 18:26:06 gamehost-one sshd[22697]: Failed password for invalid user sysadmin from 197.248.10.108 port 57110 ssh2
Sep  3 18:42:16 gamehost-one sshd[23926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.10.108 
...
2020-09-05 04:23:46
175.24.68.241 attackbots
(sshd) Failed SSH login from 175.24.68.241 (CN/China/Guangdong/Shenzhen/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  4 12:29:38 atlas sshd[9817]: Invalid user admin from 175.24.68.241 port 54296
Sep  4 12:29:40 atlas sshd[9817]: Failed password for invalid user admin from 175.24.68.241 port 54296 ssh2
Sep  4 12:48:34 atlas sshd[15169]: Invalid user esuser from 175.24.68.241 port 44094
Sep  4 12:48:36 atlas sshd[15169]: Failed password for invalid user esuser from 175.24.68.241 port 44094 ssh2
Sep  4 12:53:44 atlas sshd[16337]: Invalid user ftpuser from 175.24.68.241 port 38868
2020-09-05 04:44:36
120.237.118.139 attackbots
$f2bV_matches
2020-09-05 04:13:39

Recently Reported IPs

206.248.205.159 20.119.76.17 186.107.178.199 203.104.160.190
202.76.248.230 194.187.179.72 203.151.96.183 165.82.39.192
2606:4700:10::6814:7747 198.144.189.91 76.80.100.138 64.23.195.124
64.227.181.23 159.203.33.46 147.182.215.171 142.93.205.229
200.200.159.13 142.93.14.32 200.123.164.13 181.43.32.166