JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.75.20.50

159.75.20.50 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 46%: ?

46%

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.75.20.50

Whois 159.75.20.50

IP Abuse Reports for 159.75.20.50:

This IP address has been reported a total of 74 times from 38 distinct sources. 159.75.20.50 was first reported on January 8th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-05 06:30:55 (2 weeks ago)	Blocked by UFW (TCP on 6379) Source port: 50464 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6379) Source port: 50464 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 159.75.20.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 SeczarSecureOps	2026-05-31 20:27:19 (2 weeks ago)	Seczar SecureOps — Database Service Brute Force (16 events) — quarantined 43200m on fgdcapi	Brute-Force SSH
🇳🇱 ByeByte API	2026-05-31 20:05:54 (2 weeks ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-31T20:05:54Z. Source port 41690. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-31T20:05:54Z. Source port 41690. TCP flags: SYN. Packet: 60B, TTL 43, window 29200, IP id 37179. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 21 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-05-31 20:05:54 (2 weeks ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 2026-05-31 20:05 UTC. show less	Port Scan
🇩🇪 guldkage	2026-05-31 19:11:32 (2 weeks ago)	Unauthorized connection attempt detected from IP address 159.75.20.50 to port 6379 (ger-02) [REDIS]	Exploited Host
🇹🇭 Sawasdee	2026-05-30 16:34:10 (2 weeks ago)	Port Scan ...	Port Scan
🇺🇸 xmission.com	2026-05-27 04:08:42 (3 weeks ago)	Blocked by UFW (TCP on 6379) Source port: 59598 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 6379) Source port: 59598 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 159.75.20.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 centurion	2026-05-22 17:10:53 (4 weeks ago)	Blocked by UFW on ns02 [6379/tcp] Source port: 60498 TTL: 48 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [6379/tcp] Source port: 60498 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 guldkage	2026-05-22 16:56:38 (4 weeks ago)	Unauthorized connection attempt detected from IP address 159.75.20.50 to port 6379 (ger-02) [REDIS]	Exploited Host
🇩🇪 cheatmaster.store	2026-05-22 16:51:37 (4 weeks ago)	Automatic firewall detection. Attacker IP: 159.75.20.50 Country: CN City: Guangzhou ORG: AS45090 Sh ... show more Automatic firewall detection. Attacker IP: 159.75.20.50 Country: CN City: Guangzhou ORG: AS45090 Shenzhen Tencent Computer Systems Company Limited UFW LOGS: May 22 16:51:24 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=159.75.20.50 DST=SERVER_IP_HIDDEN LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=50520 DF PROTO=TCP SPT=37428 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 Server IP hidden for privacy. Detected repeated unauthorized connection attempts and firewall blocks. show less	Port Scan Hacking Brute-Force SSH
🇳🇱 ByeByte API	2026-05-22 16:51:08 (4 weeks ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-22T16:51:08Z. Source port 47008. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-22T16:51:08Z. Source port 47008. TCP flags: SYN. Packet: 60B, TTL 43, window 29200, IP id 23171. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 21 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-05-22 16:51:08 (4 weeks ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 2026-05-22 16:51 UTC. show less	Port Scan
🇫🇮 iamxorum	2026-05-20 10:28:41 (4 weeks ago)	2026-05-20T10:28:40.662421+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-05-20T10:28:40.662421+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=159.75.20.50 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=44797 DF PROTO=TCP SPT=59082 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇯🇵 VXG-NET	2026-05-20 09:02:43 (4 weeks ago)	port=6379, indicator_type=scan	Port Scan
🇺🇸 donarev419	2026-05-18 03:14:06 (1 month ago)	Connection to port 6379 with data transfer. Data preview: *1 $4 info	Port Scan Hacking

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.42.116.44

🇨🇴 190.121.139.85

🇧🇷 187.51.208.158

🇯🇵 142.248.150.59

🇨🇳 117.175.140.79

🇺🇸 107.150.146.69

🇩🇪 213.209.159.56

🇩🇪 195.230.103.248

🇷🇴 193.46.255.86

🇸🇪 142.251.142.238

🇺🇦 77.87.40.114

🇺🇸 20.84.153.206

🇺🇿 176.101.56.126

🇳🇱 91.92.40.5

🇱🇹 77.90.185.16

🇷🇺 109.73.206.231

🇰🇷 211.254.212.59

🇺🇸 137.184.228.138

🇳🇱 91.92.40.50

🇧🇷 205.210.31.221