JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.75.148.154

159.75.148.154 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.75.148.154

Whois 159.75.148.154

IP Abuse Reports for 159.75.148.154:

This IP address has been reported a total of 21 times from 19 distinct sources. 159.75.148.154 was first reported on June 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-06-28 15:24:29 (1 day ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Database/Cache Attack)	Brute-Force Port Scan Hacking
🇹🇭 Sawasdee	2026-06-28 01:21:07 (1 day ago)	Port Scan ...	Port Scan
Anonymous	2026-06-27 23:24:33 (1 day ago)	2026-06-28T00:24:32.476546+01:00 vps kernel: [44342815.391259] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-28T00:24:32.476546+01:00 vps kernel: [44342815.391259] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=159.75.148.154 DST=54.37.14.118 LEN=60 TOS=0x08 PREC=0x60 TTL=42 ID=46600 DF PROTO=TCP SPT=52706 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇳🇱 ByeByte API	2026-06-27 23:00:57 (1 day ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-27T23:00:56Z. Source port 37166. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-06-27T23:00:56Z. Source port 37166. TCP flags: SYN. Packet: 60B, TTL 43, window 29200, IP id 2334. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 21 hops. show less	Port Scan
🇳🇱 VMHeaven.io	2026-06-27 23:00:56 (1 day ago)	Blocked by UFW [6379/tcp] Source port: 36248 TTL: 43 Packet length: 60	Port Scan
🇳🇱 ByeByte API	2026-06-27 23:00:56 (1 day ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 2026-06-27 23:00 UTC. show less	Port Scan
🇩🇪 centurion	2026-06-27 22:02:39 (2 days ago)	Blocked by UFW on ns02 [6379/tcp] Source port: 50048 TTL: 47 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [6379/tcp] Source port: 50048 TTL: 47 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 guldkage	2026-06-27 22:01:58 (2 days ago)	Unauthorized connection attempt detected from IP address 159.75.148.154 to port 6379 (ger-02) [REDIS ... show more Unauthorized connection attempt detected from IP address 159.75.148.154 to port 6379 (ger-02) [REDIS] show less	Exploited Host
🇨🇿 lp	2026-06-26 22:25:49 (2 days ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 500 times	Port Scan
🇨🇭 cybsecaoccol	2026-06-26 22:21:55 (3 days ago)	multiple malicious connection attempts on tcp port 6379 - sch	DDoS Attack Port Scan Hacking Brute-Force
🇬🇧 OptimusGO	2026-06-26 21:40:43 (3 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-26 22:40:43 UTC Log evidence: 06/26/2026-22:40:41.737195 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 159.75.148.154:48388 -> 185.127.18.66:6379 06/26/2026-22:40:41.737195 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 159.75.148.154:48388 -> 185.127.18.66:6379 show less	Port Scan Brute-Force
🇨🇦 Arpan Sen	2026-06-26 16:20:02 (3 days ago)	Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇺🇸 cazae	2026-06-26 00:14:45 (3 days ago)	Unauthorized attempt on debian [6379/tcp] Source port: 60292 TTL: 45 Packet length: 60 TOS: 0x08 ht ... show more Unauthorized attempt on debian [6379/tcp] Source port: 60292 TTL: 45 Packet length: 60 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 iamxorum	2026-06-25 09:23:42 (4 days ago)	2026-06-25T09:23:41.629787+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-25T09:23:41.629787+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=159.75.148.154 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x60 TTL=47 ID=35986 DF PROTO=TCP SPT=38242 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cybsecaoccol	2026-06-25 03:26:24 (4 days ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.178.142

🇨🇳 115.190.154.102

🇮🇩 103.151.140.79

🇧🇫 102.180.65.165

🇧🇫 102.179.38.109

🇧🇬 79.110.118.44

🇺🇸 44.246.34.110

🇨🇳 182.127.194.208

🇺🇸 141.11.88.9

🇵🇭 136.158.82.109

🇮🇳 122.180.242.27

🇺🇸 104.243.38.174

🇧🇫 102.178.22.230

🇩🇪 102.165.55.230

🇫🇷 85.217.140.13

🇹🇼 1.164.241.190

🇹🇼 198.235.24.38

🇧🇷 186.225.5.13

🇨🇳 183.212.84.98

🇮🇳 116.72.251.104