1.30.24.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.30.247.228	attackspam	Icarus honeypot on github	2020-04-26 00:26:39

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '1.24.0.0 - 1.31.255.255'

% Abuse contact for '1.24.0.0 - 1.31.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        1.24.0.0 - 1.31.255.255
netname:        UNICOM-NM
descr:          China unicom InnerMongolia province network
descr:          China unicom
descr:          No.21,Ji-Rong Street,
descr:          Beijing 100032
country:        CN
admin-c:        CH1302-AP
tech-c:         HY690-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-NM
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2023-10-21T03:35:27Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         honghui yuan
nic-hdl:        HY690-AP
e-mail:         oo@public.hh.nm.cn
address:        NO.169 hulun south road Huhhot Inner Mongolia, 010028,China
phone:          +86-471-6268961
fax-no:         +86-471-6291559
country:        cn
mnt-by:         MAINT-CNCGROUP-NM
last-modified:  2008-09-04T07:42:51Z
source:         APNIC

% Information related to '1.24.0.0/13AS4837'

route:          1.24.0.0/13
descr:          China Unicom Neimeng Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2010-05-05T04:42:01Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.30.24.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62731
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.30.24.71.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100502 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 06 05:31:07 CST 2026
;; MSG SIZE  rcvd: 103

Host info

Host 71.24.30.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 71.24.30.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.145.67.226	attackspambots	TCP (SYN) 45.145.67.226:42062 -> port 29882, len 44	2020-09-01 16:55:08
103.145.12.177	attackspambots	[2020-09-01 04:15:56] NOTICE[1185] chan_sip.c: Registration from '"901" ' failed for '103.145.12.177:5090' - Wrong password [2020-09-01 04:15:56] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-01T04:15:56.965-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="901",SessionID="0x7f10c4286a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.177/5090",Challenge="16f9e827",ReceivedChallenge="16f9e827",ReceivedHash="ba9769e9447c036ea750a05b4402d2ed" [2020-09-01 04:15:57] NOTICE[1185] chan_sip.c: Registration from '"901" ' failed for '103.145.12.177:5090' - Wrong password ...	2020-09-01 16:33:16
118.67.215.141	attackspambots	Sep 1 09:51:04 server sshd[30677]: Invalid user ec2-user from 118.67.215.141 port 37182 Sep 1 09:51:04 server sshd[30677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.67.215.141 Sep 1 09:51:04 server sshd[30677]: Invalid user ec2-user from 118.67.215.141 port 37182 Sep 1 09:51:05 server sshd[30677]: Failed password for invalid user ec2-user from 118.67.215.141 port 37182 ssh2 Sep 1 09:52:24 server sshd[16564]: User root from 118.67.215.141 not allowed because listed in DenyUsers ...	2020-09-01 16:53:52
58.247.111.70	attack	Email login attempts - banned mail account name (SMTP)	2020-09-01 16:55:42
94.102.50.137	attackbots	firewall-block, port(s): 23224/tcp	2020-09-01 16:50:36
77.247.181.163	attackbots	(sshd) Failed SSH login from 77.247.181.163 (NL/Netherlands/lumumba.torservers.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 1 04:21:09 server sshd[27179]: Failed password for root from 77.247.181.163 port 17010 ssh2 Sep 1 04:21:11 server sshd[27179]: Failed password for root from 77.247.181.163 port 17010 ssh2 Sep 1 04:21:13 server sshd[27179]: Failed password for root from 77.247.181.163 port 17010 ssh2 Sep 1 04:21:15 server sshd[27179]: Failed password for root from 77.247.181.163 port 17010 ssh2 Sep 1 04:21:18 server sshd[27179]: Failed password for root from 77.247.181.163 port 17010 ssh2	2020-09-01 16:46:40
185.53.88.125	attack	[2020-09-01 03:41:41] NOTICE[1185][C-000093e1] chan_sip.c: Call from '' (185.53.88.125:5070) to extension '011972594801698' rejected because extension not found in context 'public'. [2020-09-01 03:41:41] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-01T03:41:41.219-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972594801698",SessionID="0x7f10c49e9558",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.125/5070",ACLName="no_extension_match" [2020-09-01 03:49:13] NOTICE[1185][C-000093ec] chan_sip.c: Call from '' (185.53.88.125:5070) to extension '9011972594801698' rejected because extension not found in context 'public'. [2020-09-01 03:49:13] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-01T03:49:13.219-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011972594801698",SessionID="0x7f10c49f9a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1 ...	2020-09-01 16:48:26
200.137.78.30	attackspam	Sep 1 07:15:57 h2779839 sshd[10491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.137.78.30 user=root Sep 1 07:15:59 h2779839 sshd[10491]: Failed password for root from 200.137.78.30 port 40098 ssh2 Sep 1 07:19:40 h2779839 sshd[10536]: Invalid user ks from 200.137.78.30 port 37076 Sep 1 07:19:40 h2779839 sshd[10536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.137.78.30 Sep 1 07:19:40 h2779839 sshd[10536]: Invalid user ks from 200.137.78.30 port 37076 Sep 1 07:19:43 h2779839 sshd[10536]: Failed password for invalid user ks from 200.137.78.30 port 37076 ssh2 Sep 1 07:23:36 h2779839 sshd[10595]: Invalid user admin from 200.137.78.30 port 34068 Sep 1 07:23:36 h2779839 sshd[10595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.137.78.30 Sep 1 07:23:36 h2779839 sshd[10595]: Invalid user admin from 200.137.78.30 port 34068 Sep 1 07:23:38 h277 ...	2020-09-01 17:00:25
103.219.112.1	attackbots	Unauthorized connection attempt detected from IP address 103.219.112.1 to port 12684 [T]	2020-09-01 16:48:11
111.72.196.253	attackbots	Sep 1 08:46:41 srv01 postfix/smtpd\[30291\]: warning: unknown\[111.72.196.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 08:50:08 srv01 postfix/smtpd\[30285\]: warning: unknown\[111.72.196.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 08:53:36 srv01 postfix/smtpd\[21287\]: warning: unknown\[111.72.196.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 08:57:04 srv01 postfix/smtpd\[974\]: warning: unknown\[111.72.196.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 08:57:15 srv01 postfix/smtpd\[974\]: warning: unknown\[111.72.196.253\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-01 17:02:48
175.37.149.77	attackspambots	Unauthorized connection attempt detected from IP address 175.37.149.77 to port 23 [T]	2020-09-01 17:11:04
120.52.146.211	attackbotsspam	Sep 1 10:15:24 server sshd[22669]: User root from 120.52.146.211 not allowed because listed in DenyUsers ...	2020-09-01 16:43:15
193.247.213.196	attackspam	Time: Tue Sep 1 06:24:02 2020 +0000 IP: 193.247.213.196 (RU/Russia/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 1 06:18:38 pv-14-ams2 sshd[1380]: Invalid user anurag from 193.247.213.196 port 38214 Sep 1 06:18:40 pv-14-ams2 sshd[1380]: Failed password for invalid user anurag from 193.247.213.196 port 38214 ssh2 Sep 1 06:22:17 pv-14-ams2 sshd[13712]: Invalid user minecraft from 193.247.213.196 port 57346 Sep 1 06:22:19 pv-14-ams2 sshd[13712]: Failed password for invalid user minecraft from 193.247.213.196 port 57346 ssh2 Sep 1 06:23:59 pv-14-ams2 sshd[19412]: Invalid user status from 193.247.213.196 port 55058	2020-09-01 16:59:26
181.49.154.26	attackspam	This client attempted to login to an administrator account on a Website, or abused from another resource.	2020-09-01 16:53:34
94.138.221.106	attack	Unauthorized connection attempt detected from IP address 94.138.221.106 to port 14274 [T]	2020-09-01 16:48:43

Recently Reported IPs

183.198.102.141	124.135.199.169	119.249.100.115	112.32.29.57
111.208.81.57	110.17.25.227	40.119.27.183	5.226.140.53
5.226.140.36	5.226.140.19	31.14.254.10	195.206.182.203
195.206.182.199	39.154.15.128	39.148.110.24	223.90.49.188
223.74.4.213	183.212.66.40	183.198.105.217	177.224.43.12