175.30.48.96
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHANGCHUN-YIQITONGXIN
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- 189.cn
- Country
- 🇨🇳 China
- City
- Changchun, Jilin
Abuse Reports
Total reports
427 from
120 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized traffic (16 bytes of payload); 7443 [1] TCP
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (5342/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 8009
|
Port Scan Hacking Exploited Host | |
| 🇯🇵 mkaraki |
1791513564 # Service_probe # SIGNATURE_SEND # source_ip:175.30.48.96 # dst_port:50060
...
|
Port Scan | |
| Anonymous |
Unauthorized SSH login attempts
|
Brute-Force SSH | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Large payload (1457 bytes); 5004 [1] TCP
|
Bad Web Bot | |
| 🇺🇸 donarev419 |
Connection to port 7788 with data transfer.
Data preview: GET / HTTP/1.1
Host: 107.175.212.44:7788
Accept: */*
|
Port Scan Hacking | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 1gz |
|
Bad Web Bot | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 8150 [1] TCP
|
Hacking | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 175.30.48.96 to port 21 (ger-02) [FTP]
|
Exploited Host | |
| 🇦🇹 hxsain |
Blocked by UFW on fr2 [3523/tcp] | SPT: 61592 | TTL: 233 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 6 attempts across 1 port (27960). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=175.30.48.96 LEN=99 TOS=0x00 PREC=0x00 TTL=40 ID=57760 DF PROTO=TCP SPT=41914 DPT=27960 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0
|
Port Scan | |
| 🇺🇸 MPL |
tcp/2561
|
Port Scan | |
| 🇺🇸 OceanTreasure |
tcp/2551; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-18T06:34:01Z
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown