Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
117.30.113.108 attack
Unauthorized connection attempt detected from IP address 117.30.113.108 to port 6656 [T]
2020-01-30 16:28:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.30.113.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.30.113.2.			IN	A

;; AUTHORITY SECTION:
.			528	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 21:11:35 CST 2022
;; MSG SIZE  rcvd: 105
Host info
2.113.30.117.in-addr.arpa domain name pointer 2.113.30.117.broad.xm.fj.dynamic.163data.com.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.113.30.117.in-addr.arpa	name = 2.113.30.117.broad.xm.fj.dynamic.163data.com.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
149.202.175.255 attackbotsspam
Aug 23 18:44:27 srv-ubuntu-dev3 sshd[52615]: Invalid user ftp-user from 149.202.175.255
Aug 23 18:44:27 srv-ubuntu-dev3 sshd[52615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.255
Aug 23 18:44:27 srv-ubuntu-dev3 sshd[52615]: Invalid user ftp-user from 149.202.175.255
Aug 23 18:44:29 srv-ubuntu-dev3 sshd[52615]: Failed password for invalid user ftp-user from 149.202.175.255 port 34302 ssh2
Aug 23 18:47:32 srv-ubuntu-dev3 sshd[53025]: Invalid user leon from 149.202.175.255
Aug 23 18:47:32 srv-ubuntu-dev3 sshd[53025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.255
Aug 23 18:47:32 srv-ubuntu-dev3 sshd[53025]: Invalid user leon from 149.202.175.255
Aug 23 18:47:34 srv-ubuntu-dev3 sshd[53025]: Failed password for invalid user leon from 149.202.175.255 port 60603 ssh2
Aug 23 18:50:31 srv-ubuntu-dev3 sshd[53353]: Invalid user ssl from 149.202.175.255
...
2020-08-24 03:51:20
95.128.190.65 attackbots
Port probing on unauthorized port 445
2020-08-24 04:15:10
162.243.129.40 attackbots
1598184997 - 08/23/2020 14:16:37 Host: 162.243.129.40/162.243.129.40 Port: 873 TCP Blocked
...
2020-08-24 04:00:48
142.93.183.229 attackbots
Port scan: Attack repeated for 24 hours
2020-08-24 04:07:49
180.76.167.78 attackbots
$f2bV_matches
2020-08-24 03:47:02
14.142.143.138 attackspam
2020-08-23T19:12:20.702437abusebot-6.cloudsearch.cf sshd[10597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.143.138  user=root
2020-08-23T19:12:22.301464abusebot-6.cloudsearch.cf sshd[10597]: Failed password for root from 14.142.143.138 port 33251 ssh2
2020-08-23T19:14:53.637612abusebot-6.cloudsearch.cf sshd[10654]: Invalid user lisa from 14.142.143.138 port 29150
2020-08-23T19:14:53.644379abusebot-6.cloudsearch.cf sshd[10654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.142.143.138
2020-08-23T19:14:53.637612abusebot-6.cloudsearch.cf sshd[10654]: Invalid user lisa from 14.142.143.138 port 29150
2020-08-23T19:14:55.248137abusebot-6.cloudsearch.cf sshd[10654]: Failed password for invalid user lisa from 14.142.143.138 port 29150 ssh2
2020-08-23T19:17:18.265592abusebot-6.cloudsearch.cf sshd[10708]: Invalid user praful from 14.142.143.138 port 25012
...
2020-08-24 04:22:04
105.43.145.200 attack
Aug 23 14:16:39 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=17612 DF PROTO=TCP SPT=2736 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 23 14:16:41 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=18365 DF PROTO=TCP SPT=2736 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 23 14:16:43 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=18576 DF PROTO=TCP SPT=2645 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0
2020-08-24 03:58:24
80.117.204.211 attackbots
Automatic report - Port Scan Attack
2020-08-24 03:50:55
194.15.36.91 attackbots
 TCP (SYN) 194.15.36.91:25859 -> port 23, len 40
2020-08-24 03:46:45
106.52.81.37 attackbots
Aug 23 20:49:42 roki-contabo sshd\[12769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.81.37  user=root
Aug 23 20:49:44 roki-contabo sshd\[12769\]: Failed password for root from 106.52.81.37 port 52702 ssh2
Aug 23 20:55:31 roki-contabo sshd\[12850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.81.37  user=root
Aug 23 20:55:34 roki-contabo sshd\[12850\]: Failed password for root from 106.52.81.37 port 44928 ssh2
Aug 23 20:58:44 roki-contabo sshd\[12881\]: Invalid user kdk from 106.52.81.37
Aug 23 20:58:44 roki-contabo sshd\[12881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.81.37
...
2020-08-24 03:46:21
49.232.185.158 attack
Time:     Sun Aug 23 10:16:47 2020 +0000
IP:       49.232.185.158 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Aug 23 09:57:41 vps3 sshd[25300]: Invalid user zcw from 49.232.185.158 port 49864
Aug 23 09:57:42 vps3 sshd[25300]: Failed password for invalid user zcw from 49.232.185.158 port 49864 ssh2
Aug 23 10:12:00 vps3 sshd[28739]: Invalid user vbox from 49.232.185.158 port 40758
Aug 23 10:12:01 vps3 sshd[28739]: Failed password for invalid user vbox from 49.232.185.158 port 40758 ssh2
Aug 23 10:16:42 vps3 sshd[29843]: Invalid user admin1 from 49.232.185.158 port 57208
2020-08-24 03:56:38
106.52.209.36 attack
Aug 23 15:43:01 ns382633 sshd\[16130\]: Invalid user zsf from 106.52.209.36 port 36876
Aug 23 15:43:01 ns382633 sshd\[16130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.209.36
Aug 23 15:43:03 ns382633 sshd\[16130\]: Failed password for invalid user zsf from 106.52.209.36 port 36876 ssh2
Aug 23 15:49:31 ns382633 sshd\[17102\]: Invalid user naveen from 106.52.209.36 port 36222
Aug 23 15:49:31 ns382633 sshd\[17102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.209.36
2020-08-24 03:55:29
177.21.16.13 attack
1598185017 - 08/23/2020 14:16:57 Host: 177.21.16.13/177.21.16.13 Port: 445 TCP Blocked
2020-08-24 03:50:14
113.222.238.23 attackbotsspam
Netgear Routers Arbitrary Command Injection Vulnerability
2020-08-24 04:24:12
52.188.167.69 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 52.188.167.69 (US/United States/-): 5 in the last 3600 secs
2020-08-24 03:52:26

Recently Reported IPs

117.30.113.201 114.224.187.239 117.30.113.208 117.30.113.198
117.30.113.21 117.30.113.206 117.30.113.210 117.30.113.212
117.30.113.204 117.30.113.216 117.30.113.214 117.30.113.203
117.30.113.218 117.30.113.220 117.30.113.224 117.30.113.222
114.224.19.68 117.30.113.228 117.30.113.225 114.224.190.2