Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '118.196.0.0 - 118.197.255.255'

% Abuse contact for '118.196.0.0 - 118.197.255.255' is 'gnoc@bytedance.com'

inetnum:        118.196.0.0 - 118.197.255.255
netname:        VOLCANO-ENGINE
descr:          Beijing Volcano Engine Technology Co., Ltd.
descr:          1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing
country:        CN
admin-c:        YW7147-AP
tech-c:         JS4370-AP
abuse-c:        AC1601-AP
status:         ALLOCATED PORTABLE
mnt-by:         MAINT-CNNIC-AP
mnt-lower:      MAINT-CNNIC-AP
mnt-routes:     MAINT-CNNIC-AP
mnt-irt:        IRT-VOLCANO-ENGINE-CN
last-modified:  2022-07-21T01:42:48Z
source:         APNIC

irt:            IRT-VOLCANO-ENGINE-CN
address:        1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing
admin-c:        YW7147-AP
tech-c:         JS4370-AP
e-mail:         gnoc@bytedance.com
abuse-mailbox:  gnoc@bytedance.com
auth:           # Filtered
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-12-15T06:11:55Z
source:         APNIC

role:           ABUSE CNNICCN
country:        ZZ
address:        Beijing, China
phone:          +000000000
e-mail:         ipas@cnnic.cn
admin-c:        IP50-AP
tech-c:         IP50-AP
nic-hdl:        AC1601-AP
remarks:        Generated from irt object IRT-CNNIC-CN
remarks:        ipas@cnnic.cn is invalid
abuse-mailbox:  ipas@cnnic.cn
mnt-by:         APNIC-ABUSE
last-modified:  2025-09-19T17:20:32Z
source:         APNIC

person:         Liu Nian
address:        1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing
country:        CN
phone:          +86-10-13810123695
e-mail:         zhangzhaoyang.1@bytedance.com
nic-hdl:        JS4370-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-01-06T01:34:46Z
source:         APNIC

person:         Chen Qi
address:        1309, 13/F, Building 4, Zijin Digital Park, Haidian District, Beijing
country:        CN
phone:          +86-10-13051468788
e-mail:         gnoc@bytedance.com
nic-hdl:        YW7147-AP
mnt-by:         MAINT-CNNIC-AP
last-modified:  2025-01-06T01:34:08Z
source:         APNIC

% Information related to '118.196.4.0/23AS137718'

route:          118.196.4.0/23
origin:         AS137718
descr:          China Internet Network Information Center
                Floor1, Building No.1 C/-Chinese Academy of Sciences
                4, South 4th Street
                Haidian District,
mnt-by:         MAINT-CNNIC-AP
last-modified:  2024-07-29T02:13:52Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.196.5.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30807
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.196.5.9.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026080300 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 03 17:31:45 CST 2026
;; MSG SIZE  rcvd: 104
Host info
Host 9.5.196.118.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 9.5.196.118.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
37.139.20.6 attackbots
Sep  7 06:36:26 root sshd[27170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.20.6 
...
2020-09-07 13:02:14
190.104.229.218 attackspambots
20/9/6@12:54:01: FAIL: Alarm-Network address from=190.104.229.218
20/9/6@12:54:02: FAIL: Alarm-Network address from=190.104.229.218
...
2020-09-07 13:09:56
117.206.160.173 attackspambots
Unauthoirsed login to NAS
2020-09-07 13:38:29
47.6.104.214 attack
Sep  7 02:53:37 serwer sshd\[16110\]: Invalid user pi from 47.6.104.214 port 52346
Sep  7 02:53:37 serwer sshd\[16110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.6.104.214
Sep  7 02:53:37 serwer sshd\[16112\]: Invalid user pi from 47.6.104.214 port 52354
Sep  7 02:53:37 serwer sshd\[16112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.6.104.214
...
2020-09-07 13:15:21
173.252.95.35 attack
Port Scan: TCP/80
2020-09-07 13:17:20
192.71.3.26 attackbots
Brute force attack stopped by firewall
2020-09-07 13:26:16
115.78.9.72 attackbots
Unauthorized connection attempt from IP address 115.78.9.72 on port 993
2020-09-07 13:13:03
141.98.10.209 attack
$f2bV_matches
2020-09-07 13:24:22
49.128.174.248 attack
Honeypot attack, port: 445, PTR: 49.128.174-248.static-mumbai.wnet.net.in.
2020-09-07 13:33:57
181.174.128.60 attackspambots
Brute force attempt
2020-09-07 13:19:13
186.37.84.198 attackbotsspam
SSH Brute Force
2020-09-07 13:10:35
222.186.30.76 attackspambots
Sep  7 05:26:03 marvibiene sshd[57594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Sep  7 05:26:06 marvibiene sshd[57594]: Failed password for root from 222.186.30.76 port 40741 ssh2
Sep  7 05:26:08 marvibiene sshd[57594]: Failed password for root from 222.186.30.76 port 40741 ssh2
Sep  7 05:26:03 marvibiene sshd[57594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Sep  7 05:26:06 marvibiene sshd[57594]: Failed password for root from 222.186.30.76 port 40741 ssh2
Sep  7 05:26:08 marvibiene sshd[57594]: Failed password for root from 222.186.30.76 port 40741 ssh2
2020-09-07 13:32:47
178.63.88.48 attackspam
/wp-login.php
2020-09-07 13:31:18
142.93.130.58 attack
Port scan: Attack repeated for 24 hours
2020-09-07 13:17:50
45.142.120.117 attack
Sep  7 07:40:45 srv01 postfix/smtpd\[21483\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 07:41:03 srv01 postfix/smtpd\[16479\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 07:41:19 srv01 postfix/smtpd\[21787\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 07:41:39 srv01 postfix/smtpd\[21787\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  7 07:41:56 srv01 postfix/smtpd\[21483\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-07 13:42:37

Recently Reported IPs

42.84.204.244 34.65.117.95 104.249.59.148 35.254.171.194
134.35.157.72 2606:4700:10::6814:7945 209.209.85.95 111.19.110.127
47.122.117.13 39.104.88.215 38.110.46.2 211.149.184.145
171.67.70.152 123.129.241.164 118.145.138.56 115.28.210.29
114.66.38.139 103.239.185.34 139.224.111.68 2606:4700:10::6816:1850