JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.78.173.122

120.78.173.122 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 100%: ?

100%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.78.173.122

Whois 120.78.173.122

IP Abuse Reports for 120.78.173.122:

This IP address has been reported a total of 150 times from 59 distinct sources. 120.78.173.122 was first reported on July 2nd 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-02 10:25:07 (4 hours ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 mist x	2026-09-01 23:01:32 (16 hours ago)	Honeypot Redis Sensor: Unauthorized Redis port 6379 probe.	Port Scan Hacking
🇨🇦 Arpan Sen	2026-09-01 18:23:42 (20 hours ago)	Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇩🇪 DasDuo	2026-09-01 15:45:18 (23 hours ago)	Attempt on port 6379 (Redis) - potential unauthorized database access attempt. Blocked by firewall ( ... show more Attempt on port 6379 (Redis) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). show less	Port Scan Hacking Exploited Host
🇳🇱 VMHeaven.io	2026-09-01 15:26:23 (23 hours ago)	Blocked by UFW [6379/tcp] Source port: 57654 TTL: 45 Packet length: 60	Port Scan
🇳🇱 ByeByte API	2026-09-01 15:26:22 (23 hours ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-09-01T15:26:22Z. Source port 58246. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-09-01T15:26:22Z. Source port 58246. TCP flags: SYN. Packet: 60B, TTL 45, window 29200, IP id 5164. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 19 hops, link Ethernet or modem. show less	Port Scan
🇩🇪 guldkage	2026-09-01 15:13:19 (23 hours ago)	Unauthorized connection attempt detected from IP address 120.78.173.122 to port 6379 (ger-02) [REDIS ... show more Unauthorized connection attempt detected from IP address 120.78.173.122 to port 6379 (ger-02) [REDIS] show less	Exploited Host
🇫🇮 iamxorum	2026-09-01 09:45:40 (1 day ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-01T09:45:39.69 ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-01T09:45:39.696689+00:00 XRM-01 kernel: [172623.276803] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=120.78.173.122 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=30322 DF PROTO=TCP SPT=51956 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-01 05:50:09 (1 day ago)	2026-09-01T07:50:08.947939+02:00 vps kernel: [4612625.593683] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-01T07:50:08.947939+02:00 vps kernel: [4612625.593683] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=120.78.173.122 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=8206 DF PROTO=TCP SPT=51502 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇮🇪 Coolnagour	2026-09-01 05:40:39 (1 day ago)	funnypot REDIS honeypot, port 6379: connect	Port Scan Hacking
🇦🇹 Pingger Shikkoken	2026-08-31 19:27:39 (1 day ago)	2026-08-31T19:27:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-08-31T19:27:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=120.78.173.122 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=53113 DF PROTO=TCP SPT=50378 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Hacking
🇧🇷 diego	2026-08-31 08:37:13 (2 days ago)	[rede-164-29] 08/31/2026-05:37:12.942931, 120.78.173.122, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-164-29] 08/31/2026-05:37:12.942931, 120.78.173.122, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 165 show less	Hacking
🇫🇷 EDSL	2026-08-31 07:59:30 (2 days ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Database/Cache Attack)	Brute-Force Hacking Port Scan
🇳🇱 ByeByte API	2026-08-31 07:56:42 (2 days ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-08-31T07:56:41Z. Source port 48386. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-08-31T07:56:41Z. Source port 48386. TCP flags: SYN. Packet: 60B, TTL 46, window 29200, IP id 48493. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 18 hops, link Ethernet or modem. show less	Port Scan
🇳🇱 VMHeaven.io	2026-08-31 07:56:41 (2 days ago)	Blocked by UFW [6379/tcp] Source port: 52698 TTL: 46 Packet length: 60	Port Scan

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.233.31.199

🇩🇪 188.245.127.83

🇳🇱 93.123.109.184

🇦🇷 45.234.34.176

🇮🇳 43.241.65.115

🇨🇳 223.112.5.139

🇩🇪 185.30.32.176

🇺🇸 178.128.145.45

🇨🇳 175.11.52.23

🇨🇦 146.190.243.37

🇧🇷 131.0.217.3

🇨🇳 110.249.201.245

🇸🇬 85.203.21.178

🇺🇸 64.227.110.221

🇨🇳 58.51.182.4

🇺🇸 35.226.66.69

🇬🇧 34.13.17.72

🇺🇸 204.48.27.117

🇨🇦 184.151.88.27

🇺🇦 178.92.103.124