JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.72.48.197

117.72.48.197 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 0%: ?

ISP	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS141679
Domain Name	jd.com
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.72.48.197

Whois 117.72.48.197

IP Abuse Reports for 117.72.48.197:

This IP address has been reported a total of 62 times from 43 distinct sources. 117.72.48.197 was first reported on January 2nd 2026, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-01-05 06:20:17 (7 months ago)	[AUTORAVALT][[05/01/2026 - 03:20:15 -03:00 UTC] Attack from [Li Yunfei] [117.72.48.197]-[RANGE:117.7 ... show more [AUTORAVALT][[05/01/2026 - 03:20:15 -03:00 UTC] Attack from [Li Yunfei] [117.72.48.197]-[RANGE:117.72.0.0 - 117.72.255.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infect] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇭🇺 dd3589	2026-01-04 10:43:02 (7 months ago)	2026-01-04T11:42:40+01:00 <masked> dovecot: pop3-login: Disconnected: Connection closed (auth failed ... show more 2026-01-04T11:42:40+01:00 <masked> dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=117.72.48.197, lip=10.2.100.70, session=</envmY1HGMB1SDDF> show less	Brute-Force
🇩🇪 xortex	2026-01-04 10:39:50 (7 months ago)	brute forces mailboxes	Brute-Force
🇸🇪 triplecode	2026-01-04 06:51:57 (7 months ago)	Reported from hMailServer	Hacking
🇩🇪 initsol	2026-01-04 06:43:01 (7 months ago)	2026-01-04T06:29:23.719792hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts i ... show more 2026-01-04T06:29:23.719792hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<qs2oOYlHIIh1SDDF> 2026-01-04T07:05:01.956271hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<crQbuYlHyMl1SDDF> 2026-01-04T07:43:00.672831hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<dyjuQIpHGMJ1SDDF> ... show less	Brute-Force
🇩🇪 initsol	2026-01-04 01:13:34 (7 months ago)	2026-01-04T01:00:32.097972hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts i ... show more 2026-01-04T01:00:32.097972hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<6SWQoYRHNN11SDDF> 2026-01-04T01:33:21.591490hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<6jv0FoVH3qF1SDDF> 2026-01-04T02:13:33.899391hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<nCG9poVHZpp1SDDF> ... show less	Brute-Force
🇬🇧 [email protected]	2026-01-04 00:33:23 (7 months ago)	...	Brute-Force SSH
🇪🇸 Gem	2026-01-03 23:00:44 (7 months ago)	Attempted SMTP or POP3 login with wrong credentials. 4 times	Brute-Force
Anonymous	2026-01-03 21:16:21 (7 months ago)	no auth attempts in 0 secs: user=<>, 117.72.48.197, TLS handshaking: Connection closed	Email Spam
🇫🇷 vhnmn	2026-01-03 21:04:39 (7 months ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
🇩🇪 xortex	2026-01-03 20:27:15 (7 months ago)	sent several mails to non existent mailboxes, brute force attack	Email Spam Brute-Force
🇩🇪 initsol	2026-01-03 19:51:15 (7 months ago)	2026-01-03T19:51:10.887899hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts i ... show more 2026-01-03T19:51:10.887899hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<HI86T4BH/uN1SDDF> 2026-01-03T20:21:09.041464hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<qjRouoBHHst1SDDF> 2026-01-03T20:51:14.177256hermes2 dovecot[1035]: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=117.72.48.197, lip=94.130.37.231, session=<A2QAJoFHgLJ1SDDF> ... show less	Brute-Force
🇧🇬 Stoyko Stoykov	2026-01-03 19:11:49 (7 months ago)	2026-01-03T20:41:59.519528+02:00 ns1 dovecot: pop3-login: Disconnected: Connection closed (auth fail ... show more 2026-01-03T20:41:59.519528+02:00 ns1 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=117.72.48.197, lip=192.168.100.60, session=<hEA8LoBH5qJ1SDDF> 2026-01-03T21:11:49.209730+02:00 ns1 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=117.72.48.197, lip=192.168.100.60, session=<rIromIBHKJN1SDDF> ... show less	Hacking Brute-Force
Anonymous	2026-01-03 19:05:04 (7 months ago)	Failed login attempt detected by Fail2Ban in plesk-dovecot jail	Web Spam
🇺🇸 bigwavedave	2026-01-03 19:00:13 (7 months ago)	IMAP or POP3	Brute-Force

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 109.205.211.110

🇨🇳 223.167.206.168

🇺🇦 193.93.230.130

🇳🇱 192.253.248.145

🇰🇷 182.220.213.61

🇨🇳 180.184.84.77

🇺🇸 162.216.150.221

🇵🇭 124.105.3.213

🇺🇸 104.243.42.167

🇧🇩 103.187.99.43

🇸🇦 79.170.53.30

🇺🇸 66.249.70.137

🇺🇸 40.83.182.122

🇮🇱 37.25.36.197

🇨🇦 20.116.34.103

🇯🇵 8.216.9.76

🇨🇳 223.105.71.106

🇸🇪 217.210.70.99

🇩🇪 217.181.88.65

🇧🇷 189.91.207.108