1.24.30.85 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '1.24.0.0 - 1.31.255.255'

% Abuse contact for '1.24.0.0 - 1.31.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        1.24.0.0 - 1.31.255.255
netname:        UNICOM-NM
descr:          China unicom InnerMongolia province network
descr:          China unicom
descr:          No.21,Ji-Rong Street,
descr:          Beijing 100032
country:        CN
admin-c:        CH1302-AP
tech-c:         HY690-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-NM
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:35:27Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         honghui yuan
nic-hdl:        HY690-AP
e-mail:         oo@public.hh.nm.cn
address:        NO.169 hulun south road Huhhot Inner Mongolia, 010028,China
phone:          +86-471-6268961
fax-no:         +86-471-6291559
country:        cn
mnt-by:         MAINT-CNCGROUP-NM
last-modified:  2008-09-04T07:42:51Z
source:         APNIC

% Information related to '1.24.0.0/13AS4837'

route:          1.24.0.0/13
descr:          China Unicom Neimeng Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2010-05-05T04:42:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.24.30.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3380
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.24.30.85.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026091001 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 11 06:32:54 CST 2026
;; MSG SIZE  rcvd: 103

Host info

Host 85.30.24.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.30.24.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.170.93.248	attack	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-06-21 17:16:19
46.53.246.240	attack	fell into ViewStateTrap:wien2018	2020-06-21 17:56:48
51.91.109.220	attackspam	Jun 21 12:19:36 lukav-desktop sshd\[23353\]: Invalid user giuseppe from 51.91.109.220 Jun 21 12:19:36 lukav-desktop sshd\[23353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.109.220 Jun 21 12:19:39 lukav-desktop sshd\[23353\]: Failed password for invalid user giuseppe from 51.91.109.220 port 50244 ssh2 Jun 21 12:29:14 lukav-desktop sshd\[23470\]: Invalid user user6 from 51.91.109.220 Jun 21 12:29:14 lukav-desktop sshd\[23470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.109.220	2020-06-21 17:52:04
212.83.140.191	attackbots	[2020-06-21 05:35:38] NOTICE[1273] chan_sip.c: Registration from '"250"' failed for '212.83.140.191:18837' - Wrong password [2020-06-21 05:35:38] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T05:35:38.737-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="250",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.140.191/18837",Challenge="59437e0c",ReceivedChallenge="59437e0c",ReceivedHash="b404b49e3607bb786e1187b622cf55d8" [2020-06-21 05:38:33] NOTICE[1273] chan_sip.c: Registration from '"251"' failed for '212.83.140.191:2112' - Wrong password [2020-06-21 05:38:33] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-21T05:38:33.994-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="251",SessionID="0x7f31c00517b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.8 ...	2020-06-21 17:42:42
139.155.17.76	attack	Jun 21 07:42:00 vps687878 sshd\[11794\]: Failed password for invalid user ts from 139.155.17.76 port 35180 ssh2 Jun 21 07:42:59 vps687878 sshd\[11894\]: Invalid user javier from 139.155.17.76 port 45592 Jun 21 07:42:59 vps687878 sshd\[11894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.17.76 Jun 21 07:43:01 vps687878 sshd\[11894\]: Failed password for invalid user javier from 139.155.17.76 port 45592 ssh2 Jun 21 07:44:04 vps687878 sshd\[11986\]: Invalid user oracle from 139.155.17.76 port 56006 Jun 21 07:44:04 vps687878 sshd\[11986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.17.76 ...	2020-06-21 17:33:17
42.116.165.68	attackbotsspam	1592711559 - 06/21/2020 05:52:39 Host: 42.116.165.68/42.116.165.68 Port: 445 TCP Blocked	2020-06-21 17:18:34
41.73.213.148	attackbots	Unauthorized connection attempt detected from IP address 41.73.213.148 to port 23	2020-06-21 17:35:06
122.51.231.218	attack	Jun 21 09:31:29 *** sshd[12576]: Invalid user fei from 122.51.231.218	2020-06-21 17:38:09
85.246.72.85	attackspam	Jun 19 00:48:38 ns sshd[19010]: Connection from 85.246.72.85 port 38082 on 134.119.36.27 port 22 Jun 19 00:48:38 ns sshd[19010]: User r.r from 85.246.72.85 not allowed because not listed in AllowUsers Jun 19 00:48:38 ns sshd[19010]: Failed password for invalid user r.r from 85.246.72.85 port 38082 ssh2 Jun 19 00:48:38 ns sshd[19010]: Received disconnect from 85.246.72.85 port 38082:11: Bye Bye [preauth] Jun 19 00:48:38 ns sshd[19010]: Disconnected from 85.246.72.85 port 38082 [preauth] Jun 19 00:54:06 ns sshd[18667]: Connection from 85.246.72.85 port 54368 on 134.119.36.27 port 22 Jun 19 00:54:13 ns sshd[18667]: Invalid user sambauser from 85.246.72.85 port 54368 Jun 19 00:54:13 ns sshd[18667]: Failed password for invalid user sambauser from 85.246.72.85 port 54368 ssh2 Jun 19 00:54:13 ns sshd[18667]: Received disconnect from 85.246.72.85 port 54368:11: Bye Bye [preauth] Jun 19 00:54:13 ns sshd[18667]: Disconnected from 85.246.72.85 port 54368 [preauth] Jun 19 00:58:04 ........ -------------------------------	2020-06-21 17:37:00
186.67.27.174	attackspam	Jun 21 11:14:13 cp sshd[19816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.27.174	2020-06-21 17:46:34
49.233.135.204	attackbots	leo_www	2020-06-21 17:17:38
39.59.63.123	attackbots	IP 39.59.63.123 attacked honeypot on port: 8080 at 6/20/2020 8:52:20 PM	2020-06-21 17:28:37
216.252.57.196	attack	Automatic report - XMLRPC Attack	2020-06-21 17:28:58
118.24.8.99	attackbotsspam	Jun 21 04:52:35 ajax sshd[26592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.8.99 Jun 21 04:52:37 ajax sshd[26592]: Failed password for invalid user zh from 118.24.8.99 port 35644 ssh2	2020-06-21 17:21:21
185.85.190.132	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-06-21 17:22:24

Recently Reported IPs

172.239.68.107	124.131.232.216	123.9.212.181	120.82.83.212
120.6.46.52	120.242.149.74	115.60.163.203	115.44.35.75
112.111.224.94	111.18.237.45	101.18.49.212	58.243.168.79
175.42.163.252	157.61.160.127	125.43.96.100	120.8.208.184
119.191.128.219	110.52.19.230	110.244.102.41	2606:4700:10::ac43:2288