JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.30.48.221

175.30.48.221 was found in our database!

This IP was reported 289 times. Confidence of Abuse is 84%: ?

84%

ISP	CHANGCHUN-YIQITONGXIN
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	189.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.30.48.221

Whois 175.30.48.221

IP Abuse Reports for 175.30.48.221:

This IP address has been reported a total of 289 times from 85 distinct sources. 175.30.48.221 was first reported on February 8th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-06-14 07:35:04 (4 hours ago)	[07:35] Port scanning. Port(s) scanned: TCP/27017	Port Scan
🇵🇱 sefinek.net	2026-06-14 07:15:38 (4 hours ago)	Honeypot hit: Empty payload (likely service probe); 26001 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 26001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-06-11 19:40:51 (2 days ago)	Blocked by UFW on LAXHH [27017/tcp] \| SPT: 34247 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [27017/tcp] \| SPT: 34247 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-06-11 06:43:21 (3 days ago)	FW-PortScan: Traffic Blocked srcport=58073 dstport=10028	Port Scan
🇩🇪 centurion	2026-06-11 01:07:17 (3 days ago)	Blocked by UFW on ns02 [3389/tcp] Source port: 43895 TTL: 237 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [3389/tcp] Source port: 43895 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-06-11 00:48:05 (3 days ago)	2026-06-11T01:48:04.663440+01:00 vps kernel: [42879044.716654] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-11T01:48:04.663440+01:00 vps kernel: [42879044.716654] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=175.30.48.221 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=33545 PROTO=TCP SPT=57965 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-06-10 22:16:22 (3 days ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-10 13:11:18 (3 days ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-09 11:16:37 (5 days ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-06 20:56:03 (1 week ago)	2026-06-06T21:56:02.871976+01:00 vps kernel: [42519526.843824] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-06T21:56:02.871976+01:00 vps kernel: [42519526.843824] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=175.30.48.221 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=38570 PROTO=TCP SPT=58356 DPT=7788 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-06-03 06:05:40 (1 week ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 dispaisyenterprises	2026-05-30 23:12:08 (2 weeks ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (90 bytes of payload); 1521 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (90 bytes of payload); 1521 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 security.rdmc.fr	2026-05-30 20:06:52 (2 weeks ago)	Port Scan Attack proto:TCP src:46990 dst:990	Port Scan
🇬🇧 PeravixGroup	2026-05-30 12:34:03 (2 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-05-29 08:23:56 (2 weeks ago)	tcp/2063	Port Scan

Showing 1 to 15 of 289 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9636:8001

🇰🇿 217.196.19.186

🇩🇪 213.209.159.226

🇺🇸 162.216.149.140

🇺🇸 137.184.217.238

🇭🇰 118.193.39.146

🇮🇶 93.180.221.235

🇮🇷 83.120.47.243

🇩🇪 47.245.129.131

🇰🇿 46.34.194.178

🇺🇸 45.156.129.86

🇳🇱 45.156.87.234

🇻🇪 38.188.48.85

🇸🇬 34.142.214.14

🇸🇬 34.21.238.111

🇸🇬 152.42.228.153

🇺🇸 147.185.132.169

🇻🇳 113.175.105.156

🇨🇳 112.90.163.204

🇧🇩 103.151.118.3