175.30.48.82
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHANGCHUN-YIQITONGXIN
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- 189.cn
- Country
- ๐จ๐ณ China
- City
- Changchun, Jilin
Abuse Reports
Total reports
416 from
121 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ซ๐ท EvoX |
๐ก๏ธ Honeypot [bsts-tpot-hive]: Unauthorized ftpd/tcp traffic (dst port 21, src port 44794) against a passive decoy service with no legitimate function, consistent with automated scanning.
|
Port Scan | |
| ๐ต๐ฑ sefinek.net |
Honeypot hit: Large payload (1457 bytes); 8098 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Bad Web Bot | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| ๐ซ๐ท Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 2033/service, 8000/service. Sensors: Honeytrap.
|
Port Scan | |
| ๐ณ๐ฑ ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 7005. Single burst at 2026-10-04 10:49 UTC.
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/5357 (2 or more attempts)
|
Port Scan | |
| ๐น๐ท Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: FTP Probe (9443/tcp) [non-standard port]
|
FTP Brute-Force Port Scan | |
| ๐บ๐ธ MPL |
tcp/9200
|
Port Scan | |
| ๐ต๐ฑ bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 7443 proto 6 detection dark_ip
|
Port Scan | |
| ๐บ๐ธ MPL |
tcp/4002
|
Port Scan | |
| ๐บ๐ธ Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| ๐บ๐ธ MPL |
tcp/2708 (2 or more attempts)
|
Port Scan | |
| ๐บ๐ธ RAP |
2026-09-22 03:20:58 UTC Unauthorized activity to TCP port 8089. Web App
|
Port Scan Web App Attack | |
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 40800 [1] TCP
|
Port Scan | |
| ๐ต๐ฑ sefinek.net |
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown