106.14.104.209

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
30% Elevated
12 reports
9 reporters · latest 17 hours ago
ISP
Aliyun Computing Co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS37963
Domain Name
alibabacloud.com
Country
🇨🇳 China
City
Shanghai, Shanghai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇮🇩 Indonesia 2 🇧🇾 Belarus 1 🇨🇳 China 1
Most common categories Brute-Force 4 Bad Web Bot 3 Web App Attack 2 DDoS Attack 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇳 Zhengka.net
zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=106.14.104.209
Port Scan Web App Attack
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (ua-quarantined)
Bad Web Bot
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Bad Web Bot
🇮🇹 VHosting
Detected attack and reported by a human
Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous
DDoS Attack
🇮🇩 xveil
2026-10-02T16:35:25.070916 mail-honeypot postfix/submission/smtpd[25081]: warning: unknown[106.14.104.209]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇮🇩 xveil
2026-10-02T07:20:57.170161 mail-honeypot postfix/submission/smtpd[28065]: warning: unknown[106.14.104.209]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇿🇦 hostsec_za
SMTP/IMAP/POP3 Auth Attack. 12 failed logins in 6 hours.
Brute-Force
🇮🇹 VHosting
Detected attack and reported by a human
Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇫🇷 jank
pop3 login attempt
Brute-Force
Anonymous
| [Dangerous/China] Aggressive IP 106.14.104.209 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack Hacking SQL Injection
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇨 128.201.160.191
🇺🇸 71.6.134.234
🇰🇷 62.169.130.83
🇯🇵 220.208.156.20
🇳🇱 213.209.159.26
🇧🇷 187.58.207.183
🇻🇳 171.243.148.7
🇨🇳 171.104.143.176
🇭🇰 154.92.2.59
🇨🇳 113.200.238.158
🇷🇺 109.63.173.169
🇫🇷 91.196.152.87
🇳🇱 77.239.124.145
🇺🇸 66.240.205.34
🇺🇸 64.62.197.76
🇳🇱 45.148.10.134
🇺🇸 44.202.29.197
🇰🇷 39.126.138.29
🇧🇪 35.210.167.3
🇧🇪 34.62.170.252
feedback