JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.30.9.221

116.30.9.221 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.30.9.221

Whois 116.30.9.221

IP Abuse Reports for 116.30.9.221:

This IP address has been reported a total of 56 times from 51 distinct sources. 116.30.9.221 was first reported on July 3rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 OptimusGO	2026-07-04 17:06:17 (2 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-04 18:06:17 UTC Log evidence: 07/04/2026-18:06:16.433492 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 116.30.9.221:8645 -> 185.127.18.66:22 show less	Port Scan Brute-Force
🇳🇱 Alboweb B.V.	2026-07-04 16:11:02 (2 days ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
Anonymous	2026-07-04 16:02:30 (3 days ago)	SSH brute force attempt. User: guest, Pass: [REDACTED]	Brute-Force SSH
🇹🇷 Threat.live	2026-07-04 16:00:04 (3 days ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 mutebefehl	2026-07-04 15:39:39 (3 days ago)	Aggressive SSH attack	Brute-Force SSH
🇹🇷 tayfargem	2026-07-04 15:25:07 (3 days ago)	2026-07-04 18:23:46 Failed password for root from 116.30.9.221 port 5665 ssh2 2026-07-04 18:24:21 rh ... show more 2026-07-04 18:23:46 Failed password for root from 116.30.9.221 port 5665 ssh2 2026-07-04 18:24:21 rhost=116.30.9.221 user=root show less	Brute-Force SSH
🇵🇱 unsoft.dynu.net	2026-07-04 12:37:43 (3 days ago)		Brute-Force SSH
🇪🇪 Selckie	2026-07-04 11:23:22 (3 days ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇩🇪 Veslys	2026-07-04 10:48:38 (3 days ago)	Jul 4 10:45:16 Veslys sshd[2844288]: Failed password for root from 116.30.9.221 port 6836 ssh2 Jul ... show more Jul 4 10:45:16 Veslys sshd[2844288]: Failed password for root from 116.30.9.221 port 6836 ssh2 Jul 4 10:48:36 Veslys sshd[2941266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.9.221 user=root Jul 4 10:48:38 Veslys sshd[2941266]: Failed password for root from 116.30.9.221 port 5934 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-07-04 10:47:27 (3 days ago)	2026-07-04T12:43:36.018024+02:00 router01.ib-heddier.de sshd[1771793]: Invalid user ubuntu from 116. ... show more 2026-07-04T12:43:36.018024+02:00 router01.ib-heddier.de sshd[1771793]: Invalid user ubuntu from 116.30.9.221 port 8397 2026-07-04T12:43:36.253894+02:00 router01.ib-heddier.de sshd[1771793]: Disconnected from invalid user ubuntu 116.30.9.221 port 8397 [preauth] 2026-07-04T12:45:15.885206+02:00 router01.ib-heddier.de sshd[1772108]: Disconnected from authenticating user root 116.30.9.221 port 8763 [preauth] 2026-07-04T12:46:18.701558+02:00 router01.ib-heddier.de sshd[1772254]: Disconnected from authenticating user root 116.30.9.221 port 5653 [preauth] 2026-07-04T12:47:27.606802+02:00 router01.ib-heddier.de sshd[1772428]: Disconnected from authenticating user root 116.30.9.221 port 5451 [preauth] show less	Brute-Force
Anonymous	2026-07-04 09:59:21 (3 days ago)	2026-07-04T09:59:19.366729+00:00 mail sshd[22583]: Failed password for root from 116.30.9.221 port 8 ... show more 2026-07-04T09:59:19.366729+00:00 mail sshd[22583]: Failed password for root from 116.30.9.221 port 8740 ssh2 2026-07-04T09:59:20.432896+00:00 mail sshd[22583]: Disconnected from authenticating user root 116.30.9.221 port 8740 [preauth] ... show less	Brute-Force SSH
🇺🇸 rafled	2026-07-04 09:32:24 (3 days ago)	Jul 4 09:32:24 proxy sshd[4042988]: Invalid user david from 116.30.9.221 port 6382 ...	Brute-Force SSH
🇧🇬 OHOST.BG	2026-07-04 09:23:39 (3 days ago)	2026-07-04T12:21:22.760734 server8.ohost.net sshd[2197415]: Failed password for root from 116.30.9.2 ... show more 2026-07-04T12:21:22.760734 server8.ohost.net sshd[2197415]: Failed password for root from 116.30.9.221 port 5582 ssh2 2026-07-04T12:22:34.710584 server8.ohost.net sshd[2198061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.9.221 user=root 2026-07-04T12:22:36.835758 server8.ohost.net sshd[2198061]: Failed password for root from 116.30.9.221 port 8063 ssh2 2026-07-04T12:23:37.299332 server8.ohost.net sshd[2198561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.9.221 user=root 2026-07-04T12:23:39.073778 server8.ohost.net sshd[2198561]: Failed password for root from 116.30.9.221 port 7776 ssh2 ... show less	Brute-Force SSH
🇫🇷 applemooz	2026-07-04 07:52:37 (3 days ago)	Jul 4 09:43:27 lnxmail62 sshd[474043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 4 09:43:27 lnxmail62 sshd[474043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.9.221 user=root Jul 4 09:43:28 lnxmail62 sshd[474043]: Failed password for root from 116.30.9.221 port 6437 ssh2 Jul 4 09:52:35 lnxmail62 sshd[478533]: Invalid user postgres from 116.30.9.221 port 6934 Jul 4 09:52:35 lnxmail62 sshd[478533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.30.9.221 Jul 4 09:52:36 lnxmail62 sshd[478533]: Failed password for invalid user postgres from 116.30.9.221 port 6934 ssh2 ... show less	Brute-Force SSH
🇩🇪 Panter	2026-07-04 06:41:02 (3 days ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 158.115.252.50

🇰🇷 112.217.188.122

🇭🇰 65.181.88.245

🇮🇳 4.240.37.21

🇧🇷 205.210.31.133

🇩🇪 130.12.180.48

🇳🇱 31.14.32.7

🇺🇸 20.46.225.117

🇨🇳 218.25.89.208

🇧🇷 205.210.31.225

🇺🇾 190.133.187.189

🇱🇹 62.60.130.219

🇧🇷 200.153.86.250

🇬🇹 190.151.130.5

🇲🇽 189.204.230.91

🇲🇽 189.203.163.10

🇫🇮 178.20.210.151

🇻🇳 171.244.143.209

🇨🇳 115.205.171.137

🇺🇸 108.208.64.146