JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.30.48.85

175.30.48.85 was found in our database!

This IP was reported 324 times. Confidence of Abuse is 57%: ?

57%

ISP	CHANGCHUN-YIQITONGXIN
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	189.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.30.48.85

Whois 175.30.48.85

IP Abuse Reports for 175.30.48.85:

This IP address has been reported a total of 324 times from 98 distinct sources. 175.30.48.85 was first reported on February 8th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-07 11:06:11 (3 days ago)	Honeypot hit: Large payload (1457 bytes); 20001 [1] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1457 bytes); 20001 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-06 05:48:10 (4 days ago)	Honeypot hit: HTTP/1.0 request on 8030 GET / Accept: /; 8030 [1] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.0 request on 8030 GET / Accept: /; 8030 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-06-05 02:24:13 (5 days ago)	Honeypot hit: Empty payload (likely service probe); 10369 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 10369 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-04 06:28:43 (6 days ago)	Honeypot hit: Unauthorized traffic (15 bytes of payload); 10000 [1] TCP	Port Scan
🇺🇸 MPL	2026-06-01 14:01:21 (1 week ago)	tcp/2960	Port Scan
🇺🇸 sumnone	2026-05-25 01:28:11 (2 weeks ago)	Port probing on unauthorized port 16113	Port Scan Hacking Exploited Host
🇸🇪 NordhTech	2026-05-24 11:00:05 (2 weeks ago)	More than 3 malicious connection attempts, trying port(s) 6565/tcp, then blocked from services ...	Port Scan Hacking
🇵🇱 sefinek.net	2026-05-23 11:08:36 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 13246 GET / Accept: /; 13246 [1] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 13246 GET / Accept: /; 13246 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇹 urnilxfgbez	2026-05-22 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-05-21 00:14:59 (2 weeks ago)	tcp/7170 (2 or more attempts)	Port Scan
🇩🇪 cheatmaster.store	2026-05-17 23:12:48 (3 weeks ago)	Automatic firewall detection. Attacker IP: 175.30.48.85 Country: CN City: Changchun ORG: AS4134 CHI ... show more Automatic firewall detection. Attacker IP: 175.30.48.85 Country: CN City: Changchun ORG: AS4134 CHINANET BACKBONE UFW LOGS: May 17 23:10:48 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=175.30.48.85 DST=SERVER_IP_HIDDEN LEN=44 TOS=0x08 PREC=0x20 TTL=237 ID=19559 PROTO=TCP SPT=34558 DPT=6699 WINDOW=1024 RES=0x00 SYN URGP=0 Server IP hidden for privacy. Detected repeated unauthorized connection attempts and firewall blocks. show less	Port Scan Hacking Brute-Force SSH
🇫🇷 Syxpi_Lumi	2026-05-15 06:00:06 (3 weeks ago)	Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 LiftUp Hosting	2026-05-10 00:15:57 (1 month ago)	Honeypot hit: Unauthorized traffic (126 bytes of payload); 8333 [1] TCP	Port Scan
🇨🇳 ThreatBook.io	2026-05-08 00:50:39 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/175.30.48.85 2026-05-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/175.30.48.85 2026-05-07 07:36:52 http://www.epochtimes.com/ 2026-05-07 13:07:01 //www.voanews.com:443 show less	Web App Attack
🇦🇺 LiftUp Hosting	2026-05-04 15:33:59 (1 month ago)	Honeypot hit: HTTP/1.1 request on 4848 GET / Accept: /; 4848 [1] TCP	Hacking Bad Web Bot

Showing 1 to 15 of 324 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.1.210.25

🇮🇩 43.243.142.42

🇪🇪 213.35.128.24

🇵🇱 194.180.48.31

🇬🇧 193.163.125.211

🇫🇷 170.168.172.43

🇳🇱 159.65.207.250

🇸🇬 128.199.231.249

🇨🇳 117.50.211.146

🇨🇳 106.13.14.186

🇺🇸 91.230.168.222

🇷🇴 193.46.255.86

🇺🇸 192.210.198.84

🇺🇸 103.103.98.6

🇫🇷 91.231.89.239

🇮🇹 91.80.175.246

🇺🇸 66.132.172.232

🇺🇸 180.178.57.218

🇺🇸 165.154.36.243

🇨🇭 104.244.79.40