117.69.30.106 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Anhui Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Brute force SMTP login attempts.	2019-10-20 14:40:16

Comments on same subnet:

IP	Type	Details	Datetime
117.69.30.4	attackspam	Apr 13 06:53:37 elektron postfix/smtpd\[12073\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.4\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.4\]\; from=\ to=\ proto=ESMTP helo=\ Apr 13 06:54:10 elektron postfix/smtpd\[12822\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.4\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.4\]\; from=\ to=\ proto=ESMTP helo=\ Apr 13 06:54:47 elektron postfix/smtpd\[12822\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.4\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.4\]\; from=\ to=\ proto=ESMTP helo=\ Apr 13 06:55:20 elektron postfix/smtpd\[12073\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.4\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.4\]\; from=\ to=\ proto=ESMTP helo=\	2020-04-13 16:42:14
117.69.30.228	attack	Email spam message	2020-03-20 17:59:24
117.69.30.94	attackbots	IP: 117.69.30.94 Ports affected Simple Mail Transfer (25) Found in DNSBL('s) ASN Details AS4134 No.31 Jin-rong Street China (CN) CIDR 117.64.0.0/13 Log Date: 24/02/2020 12:46:14 PM UTC	2020-02-24 21:31:28
117.69.30.162	attack	Feb 9 05:56:49 grey postfix/smtpd\[27745\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.162\]: 554 5.7.1 Service unavailable\; Client host \[117.69.30.162\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.69.30.162\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-09 14:38:12
117.69.30.194	attackspambots	Jan 22 13:53:20 grey postfix/smtpd\[7299\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.194\]: 554 5.7.1 Service unavailable\; Client host \[117.69.30.194\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.69.30.194\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-22 23:05:02
117.69.30.65	attackbots	Email spam message	2020-01-13 22:05:58
117.69.30.210	attackspambots	Jan 9 14:07:48 grey postfix/smtpd\[21981\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.210\]: 554 5.7.1 Service unavailable\; Client host \[117.69.30.210\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.69.30.210\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-10 00:10:06
117.69.30.32	attackbots	Jan 2 07:30:34 grey postfix/smtpd\[16335\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.32\]: 554 5.7.1 Service unavailable\; Client host \[117.69.30.32\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.69.30.32\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-02 14:52:09
117.69.30.7	attack	Dec 14 15:45:03 grey postfix/smtpd\[16976\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.7\]: 554 5.7.1 Service unavailable\; Client host \[117.69.30.7\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.69.30.7\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-15 00:11:10
117.69.30.216	attackspambots	badbot	2019-11-24 02:43:21
117.69.30.240	attackspambots	Brute force SMTP login attempts.	2019-11-01 07:36:52
117.69.30.132	attackbotsspam	Oct 2 06:53:42 elektron postfix/smtpd\[24015\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.132\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.132\]\; from=\ to=\ proto=ESMTP helo=\ Oct 2 06:54:14 elektron postfix/smtpd\[25425\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.132\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.132\]\; from=\ to=\ proto=ESMTP helo=\ Oct 2 06:54:45 elektron postfix/smtpd\[21398\]: NOQUEUE: reject: RCPT from unknown\[117.69.30.132\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.69.30.132\]\; from=\ to=\ proto=ESMTP helo=\	2019-10-02 12:58:14
117.69.30.20	attackbotsspam	Brute force attempt	2019-09-11 17:21:09
117.69.30.219	attackspambots	Brute force SMTP login attempts.	2019-08-30 13:58:55
117.69.30.4	attackbots	Brute force attempt	2019-08-15 09:11:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.69.30.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42465
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.69.30.106.			IN	A

;; AUTHORITY SECTION:
.			461	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102000 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 20 14:40:09 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 106.30.69.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.30.69.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
65.49.20.73	attackbotsspam	SSH break in attempt ...	2020-07-30 16:39:29
114.69.249.194	attackbots	Jul 29 19:28:44 eddieflores sshd\[1812\]: Invalid user yoshida from 114.69.249.194 Jul 29 19:28:44 eddieflores sshd\[1812\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.69.249.194 Jul 29 19:28:46 eddieflores sshd\[1812\]: Failed password for invalid user yoshida from 114.69.249.194 port 49259 ssh2 Jul 29 19:31:03 eddieflores sshd\[2022\]: Invalid user gopher from 114.69.249.194 Jul 29 19:31:03 eddieflores sshd\[2022\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.69.249.194	2020-07-30 16:21:13
165.227.25.239	attack	2020-07-30T14:26:34.761795hostname sshd[128928]: Invalid user shiyanlou from 165.227.25.239 port 60090 ...	2020-07-30 16:33:15
114.141.132.88	attackbotsspam	$f2bV_matches	2020-07-30 16:16:42
222.246.121.218	attack	Jul 30 05:50:50 root sshd[23595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.246.121.218 Jul 30 05:50:51 root sshd[23595]: Failed password for invalid user wangdc from 222.246.121.218 port 51347 ssh2 Jul 30 05:51:05 root sshd[23650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.246.121.218 ...	2020-07-30 16:36:56
80.211.177.143	attackbots	Jul 30 09:54:16 santamaria sshd\[21981\]: Invalid user xinxin from 80.211.177.143 Jul 30 09:54:16 santamaria sshd\[21981\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.177.143 Jul 30 09:54:18 santamaria sshd\[21981\]: Failed password for invalid user xinxin from 80.211.177.143 port 40146 ssh2 ...	2020-07-30 16:26:10
105.242.68.202	attack	Unauthorized connection attempt detected from IP address 105.242.68.202 to port 23	2020-07-30 16:39:08
222.189.23.82	attack	Port Scan ...	2020-07-30 16:53:53
106.54.91.157	attack	$f2bV_matches	2020-07-30 16:46:20
222.186.175.215	attackbotsspam	Brute-force attempt banned	2020-07-30 16:27:10
49.233.32.106	attackspam	SSH Brute Force	2020-07-30 16:16:20
60.167.112.105	attackbotsspam	Jul 30 05:51:16 andromeda postfix/smtpd\[32628\]: warning: unknown\[60.167.112.105\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:51:19 andromeda postfix/smtpd\[21103\]: warning: unknown\[60.167.112.105\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:51:21 andromeda postfix/smtpd\[32628\]: warning: unknown\[60.167.112.105\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:51:31 andromeda postfix/smtpd\[21103\]: warning: unknown\[60.167.112.105\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:51:34 andromeda postfix/smtpd\[32628\]: warning: unknown\[60.167.112.105\]: SASL LOGIN authentication failed: authentication failure	2020-07-30 16:15:22
49.233.155.170	attackbots	Jul 30 05:04:39 jumpserver sshd[309460]: Invalid user lfu from 49.233.155.170 port 56320 Jul 30 05:04:40 jumpserver sshd[309460]: Failed password for invalid user lfu from 49.233.155.170 port 56320 ssh2 Jul 30 05:10:38 jumpserver sshd[309966]: Invalid user fy from 49.233.155.170 port 34474 ...	2020-07-30 16:51:35
83.194.118.209	attackspambots	SSH break in attempt ...	2020-07-30 16:34:55
94.102.49.191	attackspambots	Fail2Ban Ban Triggered	2020-07-30 16:46:02

Recently Reported IPs

103.129.64.49	169.192.214.155	220.117.199.243	164.42.78.40
192.46.247.50	248.50.11.197	63.184.174.169	28.193.15.8
121.29.4.41	56.12.37.198	78.94.15.85	216.192.181.6
95.28.64.17	98.28.116.109	40.96.154.175	11.159.145.236
168.91.44.84	143.223.72.100	23.183.243.34	193.255.215.198