116.172.251.30

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
19 reports
12 reporters · latest 1 day ago
ISP
China United Network Communications Corporation Limited
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Lhasa, Tibet
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇹🇷 Turkey 2 🇫🇷 France 1
Most common categories Port Scan 7 Hacking 3 FTP Brute-Force 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 uthul
T-Pot honeypot: 8 hits on ports [2000] (automated)
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 3388 [1] TCP
Port Scan
🇺🇸 sandra361
Port scan detected: 8 packets across 1 port (3310). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=116.172.251.30 LEN=40 TOS=0x00 PREC=0x00 TTL=35 ID=14686 DF PROTO=TCP SPT=34348 DPT=3310 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (7547/tcp) [non-standard port]
FTP Brute-Force Port Scan
Anonymous
denied traffic to a honeypot network. destination port 10386.
Port Scan Hacking
🇵🇱 sefinek.net
Honeypot hit: Large payload (1457 bytes); 28080 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Bad Web Bot
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (12195/tcp) [non-standard port]
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 443.
Port Scan Hacking
🇺🇸 donarev419
Connection to port 5988 with data transfer. Data preview: �
Port Scan Hacking
🇺🇸 donarev419
Port scan detected on port 7687 (connection without data transfer)
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 23023.
Port Scan Hacking
🇧🇬 MazenHost
1784298117 - 07/17/2026 17:21:57 Host: 116.172.251.30/116.172.251.30 Port: 1080 TCP Blocked ...
Port Scan
🇺🇸 donarev419
Connection to port 4000 with data transfer. Data preview: �
Port Scan Hacking
Anonymous
Honeypot hit: Empty payload (likely service probe); 2198 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 66.132.159.37
🇸🇬 212.73.148.12
🇳🇱 204.76.203.213
🇺🇸 167.172.252.6
🇺🇾 167.63.234.169
🇨🇳 117.187.124.157
🇫🇮 46.29.26.203
🇬🇧 31.14.254.125
🇳🇱 77.239.124.32
🇺🇸 66.132.195.28
🇬🇧 31.14.254.106
🇧🇪 207.175.218.17
🇸🇬 103.187.147.214
🇮🇶 65.20.129.28
🇬🇧 31.14.254.105
🇺🇸 23.174.104.175
feedback