Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
117.48.193.118 attackbots
2020-01-11 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=nologin\)
2020-01-11 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=sales@**REMOVED**\)
2020-01-11 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=sales\)
2020-01-11 20:46:33
117.48.193.118 attackspam
2020-01-08 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=nologin\)
2020-01-08 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=contact@**REMOVED**\)
2020-01-08 dovecot_login authenticator failed for \(**REMOVED**\) \[117.48.193.118\]: 535 Incorrect authentication data \(set_id=contact\)
2020-01-09 05:01:17
117.48.193.118 attackbots
2019-12-30T06:30:15.690668beta postfix/smtpd[11703]: warning: unknown[117.48.193.118]: SASL LOGIN authentication failed: authentication failure
2019-12-30T06:30:19.845757beta postfix/smtpd[11703]: warning: unknown[117.48.193.118]: SASL LOGIN authentication failed: authentication failure
2019-12-30T06:30:24.406861beta postfix/smtpd[11703]: warning: unknown[117.48.193.118]: SASL LOGIN authentication failed: authentication failure
...
2019-12-30 15:15:28
117.48.193.118 attackbotsspam
Dec 28 01:25:11 web1 postfix/smtpd[21791]: warning: unknown[117.48.193.118]: SASL LOGIN authentication failed: authentication failure
...
2019-12-28 18:14:17
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '117.48.192.0 - 117.48.255.255'

% Abuse contact for '117.48.192.0 - 117.48.255.255' is 'ipas@cnnic.cn'

inetnum:        117.48.192.0 - 117.48.255.255
netname:        CloudVsp
descr:          CloudVsp.Inc
country:        CN
admin-c:        HL2919-AP
tech-c:         HL2919-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-irt:        IRT-CNNIC-CN
last-modified:  2021-11-24T23:57:39Z
source:         APNIC

irt:            IRT-CNNIC-CN
address:        Beijing, China
e-mail:         ipas@cnnic.cn
abuse-mailbox:  ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
auth:           # Filtered
remarks:        Please note that CNNIC is not an ISP and is not
remarks:        empowered to investigate complaints of network abuse.
remarks:        Please contact the tech-c or admin-c of the network.
remarks:        ipas@cnnic.cn is invalid
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-11-17T23:08:37Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Huakun Li
nic-hdl:        HL2919-AP
e-mail:         lihuakun@cloudvsp.com
address:        NO.18 Building University of Technology
address:        Beijing Economic-Technological Development Area
phone:          +86-18101125590
fax-no:         +86-10-87529719
country:        CN
mnt-by:         MAINT-CNNIC-AP
last-modified:  2014-04-21T01:48:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.48.193.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7681
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.48.193.133.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026020302 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 04 10:16:23 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 133.193.48.117.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 133.193.48.117.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
84.1.150.12 attackbotsspam
Jul 11 06:02:57 * sshd[11912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.150.12
Jul 11 06:02:59 * sshd[11912]: Failed password for invalid user user from 84.1.150.12 port 59722 ssh2
2019-07-11 12:22:09
138.68.111.27 attack
Jul 11 06:36:12 localhost sshd\[9700\]: Invalid user koha from 138.68.111.27 port 19158
Jul 11 06:36:12 localhost sshd\[9700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Jul 11 06:36:14 localhost sshd\[9700\]: Failed password for invalid user koha from 138.68.111.27 port 19158 ssh2
2019-07-11 12:58:42
115.165.0.224 attackbotsspam
Jul 11 04:25:06 marvibiene sshd[43889]: Invalid user admin from 115.165.0.224 port 41284
Jul 11 04:25:06 marvibiene sshd[43889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.165.0.224
Jul 11 04:25:06 marvibiene sshd[43889]: Invalid user admin from 115.165.0.224 port 41284
Jul 11 04:25:08 marvibiene sshd[43889]: Failed password for invalid user admin from 115.165.0.224 port 41284 ssh2
...
2019-07-11 12:30:26
72.210.252.137 attackspambots
Jul 11 06:01:58 vps647732 sshd[20124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.210.252.137
Jul 11 06:02:00 vps647732 sshd[20124]: Failed password for invalid user admin from 72.210.252.137 port 57552 ssh2
...
2019-07-11 12:37:12
103.118.188.136 attack
Unauthorized connection attempt from IP address 103.118.188.136 on Port 445(SMB)
2019-07-11 12:48:28
142.44.146.189 attackbotsspam
Time:     Thu Jul 11 00:30:25 2019 -0300
IP:       142.44.146.189 (CA/Canada/ip189.ip-142-44-146.net)
Failures: 30 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block
2019-07-11 13:09:44
112.196.26.202 attackbotsspam
Jul 11 06:04:38 cp sshd[10785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.196.26.202
Jul 11 06:04:39 cp sshd[10785]: Failed password for invalid user testftp from 112.196.26.202 port 59036 ssh2
Jul 11 06:07:17 cp sshd[12426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.196.26.202
2019-07-11 12:21:11
81.30.208.114 attackbots
Jul 11 06:01:52 vpn01 sshd\[29291\]: Invalid user git from 81.30.208.114
Jul 11 06:01:52 vpn01 sshd\[29291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.208.114
Jul 11 06:01:54 vpn01 sshd\[29291\]: Failed password for invalid user git from 81.30.208.114 port 41163 ssh2
2019-07-11 12:35:40
132.148.129.180 attack
2019-07-11T04:01:42.289765abusebot-5.cloudsearch.cf sshd\[13864\]: Invalid user robbie from 132.148.129.180 port 53348
2019-07-11 12:28:49
180.124.241.30 attack
CN from [180.124.241.30] port=8821 helo=mx.zoho.com
2019-07-11 13:12:18
51.79.129.235 attackspambots
Jul 11 05:02:44 localhost sshd\[1064\]: Invalid user zj from 51.79.129.235 port 37250
Jul 11 05:02:44 localhost sshd\[1064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.129.235
...
2019-07-11 12:39:43
77.34.128.130 attack
'IP reached maximum auth failures for a one day block'
2019-07-11 12:56:11
151.18.115.148 attack
Jul1106:01:44server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.18.115.148\,lip=136.243.224.50\,TLS\,session=\Jul1106:01:44server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.18.115.148\,lip=136.243.224.50\,TLS\,session=\Jul1106:01:46server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.18.115.148\,lip=136.243.224.50\,TLS\,session=\Jul1106:01:46server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.18.115.148\,lip=136.243.224.50\,TLS\,session=\Jul1106:01:48server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.18.115.148\,lip=136.243.224.50\,TLS\,session=\Jul1106:01:48server2dovecot:imap-l
2019-07-11 12:27:11
122.117.236.88 attack
19/7/11@00:01:12: FAIL: IoT-Telnet address from=122.117.236.88
...
2019-07-11 13:02:01
2.180.30.220 attackspam
Unauthorized connection attempt from IP address 2.180.30.220 on Port 445(SMB)
2019-07-11 12:48:49

Recently Reported IPs

54.227.131.131 174.138.20.6 207.6.29.167 104.248.187.215
204.48.31.188 74.249.177.184 35.149.183.157 134.122.68.94
35.149.183.143 69.5.7.169 10.188.33.52 182.141.248.78
254.238.255.201 20.169.106.8 18.139.175.6 91.230.168.102
195.184.76.144 157.48.194.106 116.76.38.239 35.203.211.14