Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.30.242.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7519
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;3.30.242.30.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 11:36:04 CST 2025
;; MSG SIZE  rcvd: 104
Host info
30.242.30.3.in-addr.arpa domain name pointer ec2-3-30-242-30.us-gov-west-1.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
30.242.30.3.in-addr.arpa	name = ec2-3-30-242-30.us-gov-west-1.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
61.76.175.195 attack
2019-09-28T07:03:41.566624abusebot-4.cloudsearch.cf sshd\[22696\]: Invalid user master from 61.76.175.195 port 42450
2019-09-28 15:20:55
222.231.33.233 attack
Sep 28 08:46:14 vps691689 sshd[9003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.231.33.233
Sep 28 08:46:15 vps691689 sshd[9003]: Failed password for invalid user 1qaz@2wsx from 222.231.33.233 port 33212 ssh2
Sep 28 08:50:51 vps691689 sshd[9091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.231.33.233
...
2019-09-28 15:56:08
115.236.100.114 attack
Sep 28 09:30:06 dedicated sshd[27728]: Invalid user nmrsu from 115.236.100.114 port 43563
2019-09-28 15:49:37
190.210.42.83 attackspam
Sep 27 21:40:05 lcdev sshd\[919\]: Invalid user ftpuser1 from 190.210.42.83
Sep 27 21:40:05 lcdev sshd\[919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.42.83
Sep 27 21:40:07 lcdev sshd\[919\]: Failed password for invalid user ftpuser1 from 190.210.42.83 port 43952 ssh2
Sep 27 21:45:08 lcdev sshd\[1344\]: Invalid user kuang from 190.210.42.83
Sep 27 21:45:08 lcdev sshd\[1344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.42.83
2019-09-28 15:53:38
196.188.42.130 attackbots
Sep 28 09:24:07 core sshd[25383]: Invalid user flood from 196.188.42.130 port 53323
Sep 28 09:24:09 core sshd[25383]: Failed password for invalid user flood from 196.188.42.130 port 53323 ssh2
...
2019-09-28 15:36:34
185.216.140.43 attackbots
Blocked for port scanning.
Time: Sat Sep 28. 04:34:35 2019 +0200
IP: 185.216.140.43 (NL/Netherlands/-)

Sample of block hits:
Sep 28 04:30:19 vserv kernel: [803141.813341] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=25115 PROTO=TCP SPT=52306 DPT=8095 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 28 04:30:44 vserv kernel: [803166.673570] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=12160 PROTO=TCP SPT=52306 DPT=9994 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 28 04:31:20 vserv kernel: [803202.887431] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14527 PROTO=TCP SPT=52306 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0
Sep 28 04:31:38 vserv kernel: [803221.316894] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=185.216.140.43 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=36769 PROTO=TCP SPT=52306 DPT=8022 ....
2019-09-28 15:42:01
103.19.117.243 attackbotsspam
A spam used this IP for the URL in the message. 
This kind of spams used ns177.change-d.net and ns177-02 as the name servers for the domains of its email addresses and URLs (ex. iyye667.com).
2019-09-28 15:34:38
103.230.152.139 attackspambots
Sent mail to target address hacked/leaked from abandonia in 2016
2019-09-28 15:55:22
222.186.175.220 attack
Sep 27 21:33:41 eddieflores sshd\[13540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
Sep 27 21:33:43 eddieflores sshd\[13540\]: Failed password for root from 222.186.175.220 port 30488 ssh2
Sep 27 21:34:07 eddieflores sshd\[13574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
Sep 27 21:34:08 eddieflores sshd\[13574\]: Failed password for root from 222.186.175.220 port 37524 ssh2
Sep 27 21:34:39 eddieflores sshd\[13614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220  user=root
2019-09-28 15:35:24
106.12.181.184 attackbots
Sep 28 06:30:49 ip-172-31-62-245 sshd\[23983\]: Invalid user exegesis from 106.12.181.184\
Sep 28 06:30:51 ip-172-31-62-245 sshd\[23983\]: Failed password for invalid user exegesis from 106.12.181.184 port 34764 ssh2\
Sep 28 06:35:45 ip-172-31-62-245 sshd\[24040\]: Invalid user vs from 106.12.181.184\
Sep 28 06:35:47 ip-172-31-62-245 sshd\[24040\]: Failed password for invalid user vs from 106.12.181.184 port 44902 ssh2\
Sep 28 06:40:41 ip-172-31-62-245 sshd\[24168\]: Invalid user aric from 106.12.181.184\
2019-09-28 15:42:17
106.12.116.237 attackbotsspam
Sep 27 21:34:34 auw2 sshd\[18620\]: Invalid user geert from 106.12.116.237
Sep 27 21:34:34 auw2 sshd\[18620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.237
Sep 27 21:34:36 auw2 sshd\[18620\]: Failed password for invalid user geert from 106.12.116.237 port 40438 ssh2
Sep 27 21:40:03 auw2 sshd\[19247\]: Invalid user share from 106.12.116.237
Sep 27 21:40:03 auw2 sshd\[19247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.116.237
2019-09-28 15:54:38
198.71.238.23 attack
xmlrpc attack
2019-09-28 15:19:42
119.57.120.107 attackspam
SMTP Fraud Orders
2019-09-28 15:38:31
106.12.6.74 attackbotsspam
Sep 28 09:12:12 pornomens sshd\[9882\]: Invalid user desmond from 106.12.6.74 port 41070
Sep 28 09:12:12 pornomens sshd\[9882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.74
Sep 28 09:12:14 pornomens sshd\[9882\]: Failed password for invalid user desmond from 106.12.6.74 port 41070 ssh2
...
2019-09-28 15:46:36
222.186.52.89 attack
Sep 28 09:32:50 dcd-gentoo sshd[11221]: User root from 222.186.52.89 not allowed because none of user's groups are listed in AllowGroups
Sep 28 09:32:53 dcd-gentoo sshd[11221]: error: PAM: Authentication failure for illegal user root from 222.186.52.89
Sep 28 09:32:50 dcd-gentoo sshd[11221]: User root from 222.186.52.89 not allowed because none of user's groups are listed in AllowGroups
Sep 28 09:32:53 dcd-gentoo sshd[11221]: error: PAM: Authentication failure for illegal user root from 222.186.52.89
Sep 28 09:32:50 dcd-gentoo sshd[11221]: User root from 222.186.52.89 not allowed because none of user's groups are listed in AllowGroups
Sep 28 09:32:53 dcd-gentoo sshd[11221]: error: PAM: Authentication failure for illegal user root from 222.186.52.89
Sep 28 09:32:53 dcd-gentoo sshd[11221]: Failed keyboard-interactive/pam for invalid user root from 222.186.52.89 port 10848 ssh2
...
2019-09-28 15:33:47

Recently Reported IPs

166.130.21.140 246.9.191.243 91.99.162.180 198.124.213.163
7.238.154.121 5.38.179.163 219.209.65.13 65.148.225.147
46.173.212.28 99.231.241.110 28.65.2.169 101.189.185.54
243.109.173.155 245.245.78.253 240.138.55.17 190.174.9.126
28.67.83.138 171.42.239.28 131.215.137.209 49.233.45.0