116.22.30.122 - IPInfo

Basic Info

City: Guangzhou

Region: Guangdong

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 116.22.30.122 to port 6656 [T]	2020-01-27 04:30:00

Comments on same subnet:

IP	Type	Details	Datetime
116.22.30.70	attack	Unauthorized connection attempt detected from IP address 116.22.30.70 to port 6656 [T]	2020-01-29 19:47:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.22.30.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39918
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.22.30.122.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012601 1800 900 604800 86400

;; Query time: 121 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 04:29:57 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 122.30.22.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 122.30.22.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.183.181.7	attack	2020-09-09T18:20:59.671145shield sshd\[29117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.181.7 user=root 2020-09-09T18:21:01.627620shield sshd\[29117\]: Failed password for root from 68.183.181.7 port 51232 ssh2 2020-09-09T18:24:55.970799shield sshd\[29349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.181.7 user=root 2020-09-09T18:24:58.659878shield sshd\[29349\]: Failed password for root from 68.183.181.7 port 52338 ssh2 2020-09-09T18:28:50.434735shield sshd\[29578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.181.7 user=root	2020-09-10 02:53:35
88.99.244.181	attackbotsspam	88.99.244.181 - - [09/Sep/2020:04:20:16 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 88.99.244.181 - - [09/Sep/2020:04:20:19 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 88.99.244.181 - - [09/Sep/2020:04:20:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-10 02:20:07
206.81.12.141	attackbots	Sep 9 20:10:29 ns3164893 sshd[2037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.12.141 user=root Sep 9 20:10:31 ns3164893 sshd[2037]: Failed password for root from 206.81.12.141 port 33570 ssh2 ...	2020-09-10 02:39:39
163.172.50.168	attack	Port Scan detected from 163.172.50.168 (FR/France/Île-de-France/Paris/163-172-50-168.rev.poneytelecom.eu). 4 hits in the last 236 seconds	2020-09-10 02:31:00
40.107.138.88	attack	Spam from jane@linkinfo.biz	2020-09-10 02:52:51
52.231.78.9	attack	Sep 9 10:00:27 srv1 postfix/smtpd[30452]: warning: unknown[52.231.78.9]: SASL LOGIN authentication failed: authentication failure Sep 9 10:20:53 srv1 postfix/smtpd[3204]: warning: unknown[52.231.78.9]: SASL LOGIN authentication failed: authentication failure Sep 9 10:22:29 srv1 postfix/smtpd[3204]: warning: unknown[52.231.78.9]: SASL LOGIN authentication failed: authentication failure Sep 9 10:23:49 srv1 postfix/smtpd[3204]: warning: unknown[52.231.78.9]: SASL LOGIN authentication failed: authentication failure Sep 9 10:25:17 srv1 postfix/smtpd[3204]: warning: unknown[52.231.78.9]: SASL LOGIN authentication failed: authentication failure ...	2020-09-10 02:33:06
159.203.44.177	attackbotsspam	21 attempts against mh-misbehave-ban on fire	2020-09-10 02:39:02
175.24.61.126	attackbots	...	2020-09-10 02:27:02
122.155.17.174	attackspam	Sep 9 20:11:28 santamaria sshd\[19375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.17.174 user=root Sep 9 20:11:30 santamaria sshd\[19375\]: Failed password for root from 122.155.17.174 port 25637 ssh2 Sep 9 20:18:22 santamaria sshd\[19526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.17.174 user=root ...	2020-09-10 02:19:39
51.255.55.129	attackbots	2020-09-09 00:32:59.818925-0500 localhost smtpd[40014]: NOQUEUE: reject: RCPT from unknown[51.255.55.129]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.255.55.129]; from= to= proto=ESMTP helo=	2020-09-10 02:17:36
177.136.160.91	attack	1599670747 - 09/09/2020 18:59:07 Host: 177.136.160.91/177.136.160.91 Port: 445 TCP Blocked	2020-09-10 02:54:38
177.69.45.188	attack	IP: 177.69.45.188 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 58% Found in DNSBL('s) ASN Details AS16735 ALGAR TELECOM S/A Brazil (BR) CIDR 177.69.0.0/16 Log Date: 9/09/2020 6:42:56 AM UTC	2020-09-10 02:42:13
156.211.175.80	attackbotsspam	1599583676 - 09/08/2020 18:47:56 Host: 156.211.175.80/156.211.175.80 Port: 445 TCP Blocked	2020-09-10 02:21:44
95.141.25.193	attackspam	2020-09-08 11:46:01.771238-0500 localhost smtpd[80895]: NOQUEUE: reject: RCPT from unknown[95.141.25.193]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.141.25.193]; from= to= proto=ESMTP helo=	2020-09-10 02:15:39
178.220.180.24	attack	Brute Force	2020-09-10 02:36:56

Recently Reported IPs

20.34.212.238	114.99.0.140	106.44.89.57	91.11.78.150
195.160.147.22	111.170.71.58	113.76.16.39	124.169.52.135
113.61.144.2	112.114.89.119	197.178.159.191	187.225.130.226
99.56.60.159	111.197.210.113	68.199.105.193	110.87.221.109
2.98.16.27	106.122.169.247	122.157.68.24	209.152.36.152