175.30.48.161

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
66% Elevated
454 reports
126 reporters · latest 4 days ago
ISP
CHANGCHUN-YIQITONGXIN
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
189.cn
Country
🇨🇳 China
City
Changchun, Jilin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
454 from 126 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇲🇳 Mongolia 9 🇺🇸 United States of America 9 🇩🇪 Germany 5
Most common categories Port Scan 30 Hacking 7 Web App Attack 4 Brute-Force 3 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 nfsec.pl
Detected: TCP scan on port: 81 with flags: SYN
Port Scan
🇬🇧 sandra361
Port scan detected: 5 attempts across 1 port (7443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=175.30.48.161 LEN=40 TOS=0x00 PREC=0x00 TTL=34 ID=53367 DF PROTO=TCP SPT=22773 DPT=7443 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
Anonymous
Drop from IP address 175.30.48.161 to tcp-port 11255
Port Scan
🇺🇸 1gz
Bad Web Bot
🇺🇸 sumnone
Port probing on unauthorized port 8126
Port Scan Hacking Exploited Host
🇺🇸 sandra361
Port scan detected: 7 attempts across 1 port (2153). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=175.30.48.161 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=45601 DF PROTO=TCP SPT=63366 DPT=2153 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇺🇸 sandra361
Port scan detected: 6 attempts across 1 port (2198). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=175.30.48.161 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=8521 DF PROTO=TCP SPT=50233 DPT=2198 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 32769 [1] TCP
Port Scan
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇫🇷 uthul
T-Pot honeypot: 10 hits on ports [51005] (automated)
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (1833/tcp) [non-standard port]
FTP Brute-Force Port Scan
Anonymous
Port Scan Brute-Force
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10010 [1] TCP
Port Scan
🇬🇧 sandra361
Port scan detected: 6 attempts across 1 port (9020). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=175.30.48.161 LEN=56 TOS=0x00 PREC=0x00 TTL=39 ID=65025 DF PROTO=TCP SPT=20807 DPT=9020 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0
Port Scan
🇵🇱 sefinek.net
Honeypot hit: Empty payload (likely service probe); 10432 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.180.246.89
🇳🇱 109.160.32.103
🇬🇧 64.227.37.210
🇳🇱 38.240.32.206
🇺🇸 216.25.89.104
🇨🇳 202.103.157.115
🇺🇸 157.245.177.41
🇮🇷 130.193.77.236
🇺🇸 73.220.57.158
🇩🇪 69.5.169.168
🇩🇪 69.5.169.99
🇺🇸 44.220.185.178
🇨🇴 38.51.187.100
🇨🇴 38.21.115.202
🇺🇸 34.20.134.146
🇺🇸 216.73.161.150
🇨🇳 211.158.173.105
🇳🇱 195.178.110.26
🇨🇴 190.84.88.221
feedback