1.30.189.152 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.30.189.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56466
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.30.189.152.			IN	A

;; AUTHORITY SECTION:
.			152	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022092401 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 25 07:07:29 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 152.189.30.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.189.30.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.165.196.107	attack	\[2019-10-01 05:28:30\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '188.165.196.107:51749' - Wrong password \[2019-10-01 05:28:30\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-01T05:28:30.287-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3008",SessionID="0x7f1e1c27a4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.196.107/51749",Challenge="5cb8fa4e",ReceivedChallenge="5cb8fa4e",ReceivedHash="f1196552c6f808fe932eda91c62eea16" \[2019-10-01 05:30:52\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '188.165.196.107:65392' - Wrong password \[2019-10-01 05:30:52\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-01T05:30:52.021-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="146",SessionID="0x7f1e1c27a4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.1	2019-10-01 17:36:22
117.200.69.3	attackspambots	SSH/22 MH Probe, BF, Hack -	2019-10-01 17:26:35
165.22.127.25	attack	Wordpress bruteforce	2019-10-01 17:40:16
114.220.148.144	attack	10/01/2019-05:49:14.018059 114.220.148.144 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-10-01 17:29:00
196.15.211.92	attackbotsspam	$f2bV_matches	2019-10-01 17:37:09
116.196.85.71	attack	Oct 1 10:01:52 nextcloud sshd\[21140\]: Invalid user airaghi from 116.196.85.71 Oct 1 10:01:52 nextcloud sshd\[21140\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.85.71 Oct 1 10:01:54 nextcloud sshd\[21140\]: Failed password for invalid user airaghi from 116.196.85.71 port 35486 ssh2 ...	2019-10-01 17:35:21
58.59.158.93	attack	Oct 1 05:49:31 host proftpd\[5669\]: 0.0.0.0 $58.59.158.93\[58.59.158.93\]$ - USER anonymous: no such user found from 58.59.158.93 \[58.59.158.93\] to 62.210.146.38:21 ...	2019-10-01 17:12:34
45.40.57.177	attackbots	Sep 30 11:45:37 ntop sshd[32113]: Invalid user rack from 45.40.57.177 port 49372 Sep 30 11:45:39 ntop sshd[32113]: Failed password for invalid user rack from 45.40.57.177 port 49372 ssh2 Sep 30 11:45:40 ntop sshd[32113]: Received disconnect from 45.40.57.177 port 49372:11: Bye Bye [preauth] Sep 30 11:45:40 ntop sshd[32113]: Disconnected from 45.40.57.177 port 49372 [preauth] Sep 30 12:05:55 ntop sshd[1027]: Invalid user oy from 45.40.57.177 port 34426 Sep 30 12:05:57 ntop sshd[1027]: Failed password for invalid user oy from 45.40.57.177 port 34426 ssh2 Sep 30 12:05:57 ntop sshd[1027]: Received disconnect from 45.40.57.177 port 34426:11: Bye Bye [preauth] Sep 30 12:05:57 ntop sshd[1027]: Disconnected from 45.40.57.177 port 34426 [preauth] Sep 30 12:10:19 ntop sshd[1466]: Invalid user tmp from 45.40.57.177 port 47900 Sep 30 12:10:20 ntop sshd[1466]: Failed password for invalid user tmp from 45.40.57.177 port 47900 ssh2 Sep 30 12:10:21 ntop sshd[1466]: Received disconnect ........ -------------------------------	2019-10-01 17:43:02
77.235.219.73	attack	" "	2019-10-01 17:21:33
14.102.7.19	attackbots	[Aegis] @ 2019-10-01 09:41:25 0100 -> Sender domain has bogus MX record. It should not be sending e-mail.	2019-10-01 17:21:11
115.88.25.178	attack	Oct 1 07:51:10 game-panel sshd[26629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.88.25.178 Oct 1 07:51:12 game-panel sshd[26629]: Failed password for invalid user john from 115.88.25.178 port 55616 ssh2 Oct 1 07:55:55 game-panel sshd[26835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.88.25.178	2019-10-01 17:32:39
202.129.241.102	attackspambots	Oct 1 07:05:16 www sshd\[37271\]: Invalid user dragos from 202.129.241.102Oct 1 07:05:17 www sshd\[37271\]: Failed password for invalid user dragos from 202.129.241.102 port 43006 ssh2Oct 1 07:06:51 www sshd\[37286\]: Invalid user jia from 202.129.241.102 ...	2019-10-01 17:19:26
1.58.105.170	attackbotsspam	Automatic report - FTP Brute Force	2019-10-01 17:38:30
222.186.42.117	attackspam	Oct 1 11:29:22 mail sshd\[15527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117 user=root Oct 1 11:29:24 mail sshd\[15527\]: Failed password for root from 222.186.42.117 port 51064 ssh2 Oct 1 11:29:27 mail sshd\[15527\]: Failed password for root from 222.186.42.117 port 51064 ssh2 Oct 1 11:29:28 mail sshd\[15527\]: Failed password for root from 222.186.42.117 port 51064 ssh2 Oct 1 11:34:34 mail sshd\[16077\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117 user=root	2019-10-01 17:40:49
123.126.34.54	attackspam	Oct 1 07:04:35 www sshd\[181274\]: Invalid user system from 123.126.34.54 Oct 1 07:04:35 www sshd\[181274\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.34.54 Oct 1 07:04:37 www sshd\[181274\]: Failed password for invalid user system from 123.126.34.54 port 42453 ssh2 ...	2019-10-01 17:13:13

Recently Reported IPs

1.29.63.188	1.3.254.51	1.30.3.4	1.30.122.21
1.30.231.30	1.30.159.168	1.3.19.79	1.3.205.136
1.30.190.101	1.3.239.91	1.30.96.240	1.3.54.207
1.3.207.110	1.30.196.160	1.30.126.253	1.3.52.183
1.3.196.185	1.30.111.88	1.3.37.50	1.30.164.68