JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.13.225

106.75.13.225 was found in our database!

This IP was reported 467 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS9808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.13.225

Whois 106.75.13.225

IP Abuse Reports for 106.75.13.225:

This IP address has been reported a total of 467 times from 116 distinct sources. 106.75.13.225 was first reported on January 7th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dispaisyenterprises	2026-06-15 21:33:50 (6 hours ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 5560 GET / Accept: /; 5560 [4] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 5560 GET / Accept: /; 5560 [4] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-06-15 17:36:34 (10 hours ago)	Honeypot hit: Empty payload (likely service probe); 9042 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 9042 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 ICS Labs	2026-06-05 20:02:55 (1 week ago)	ICS Labs identified 106.75.13.225 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇲🇹 neilcaruana	2026-06-05 18:13:09 (1 week ago)	Sentinel detected an attack on port [10250]	Hacking
🇳🇱 donarev419	2026-06-05 05:36:37 (1 week ago)	Connection to port 646 with data transfer. Data preview: 0001002f0a010101000002000025000000300500000 ... show more Connection to port 646 with data transfer. Data preview: 0001002f0a010101000002000025000000300500000e000100b400000000ac1a016a00008506000180850b00018086030001 show less	Port Scan Hacking
🇩🇪 femboy.cat	2026-06-05 04:25:55 (1 week ago)	Port scan to tcp/3002 from 106.75.13.225	Brute-Force
🇧🇬 MazenHost	2026-06-05 01:52:12 (1 week ago)	1780624332 - 06/05/2026 04:52:12 Host: 106.75.13.225/106.75.13.225 Port: 11 TCP Blocked ...	Port Scan
Anonymous	2026-06-04 22:09:15 (1 week ago)	Honeypot hit: HTTP/1.1 request on 8545 POST / Accept: / POST Data: {"jsonrpc":"2.0","method":"web ... show more Honeypot hit: HTTP/1.1 request on 8545 POST / Accept: / POST Data: {"jsonrpc":"2.0","method":"web3_clientVersion","params":[],"id":67}; 8545 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 gbzret4d	2026-06-04 01:51:55 (1 week ago)	Honeypot [uk-production01]: HTTP/1.1 request on 6010 GET / Accept: /; 6010 [5] TCP	Hacking Bad Web Bot
Anonymous	2026-06-03 21:15:57 (1 week ago)	Honeypot hit: HTTP/1.1 request on 8688 GET / Accept: /; 8688 [5] TCP Reported by: https://github. ... show more Honeypot hit: HTTP/1.1 request on 8688 GET / Accept: /; 8688 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-06-03 18:10:48 (1 week ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (64 bytes of payload); 5003 [9] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (64 bytes of payload); 5003 [9] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 gbzret4d	2026-06-03 16:15:51 (1 week ago)	Honeypot [uk-production01]: Unauthorized traffic (247 bytes of payload); 9023 [5] TCP	Port Scan
🇩🇪 london2038.com	2026-06-03 04:08:59 (1 week ago)	2026-06-03 06:08:17.133 5555/TCP connection CID-4775 failed from 106.75.13.225 (106.75.13.225), port ... show more 2026-06-03 06:08:17.133 5555/TCP connection CID-4775 failed from 106.75.13.225 (106.75.13.225), port 59224 show less	Port Scan
🇬🇧 gbzret4d	2026-06-03 03:15:53 (1 week ago)	Honeypot [uk-production01]: Unauthorized traffic (64 bytes of payload); 9000 [16], 9076 [5] TCP	Port Scan
Anonymous	2026-06-03 02:29:11 (1 week ago)	Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: ... show more Fail2Ban dovecot-docker-host on Security-Instance. Persistent malicious activity detected. Evidence: 2026-06-03T04:29:09.274716+02:00 correu dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=106.75.13.225, lip=192.168.16.3, TLS, session=<hLdDMVBTFNRqSw3h> 2026-06-03T04:29:09.730215+02:00 correu dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=106.75.13.225, lip=192.168.16.3, TLS handshaking: Connection closed, session=<W6tKMVBTEtdqSw3h> 2026-06-03T04:29:10.353650+02:00 correu dovecot: imap-login: Disconnected: Connection closed: read(size=598) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=106.75.13.225, lip=192.168.16.3, TLS handshaking: read(size=598) failed: Connecti show less	Brute-Force

Showing 1 to 15 of 467 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:1400::27

🇨🇳 211.145.38.32

🇨🇳 123.245.84.129

🇺🇸 74.48.108.35

🇺🇸 64.62.197.66

🇺🇸 45.156.129.171

🇺🇸 45.74.252.67

🇰🇿 176.64.33.83

🇮🇩 160.187.174.22

🇨🇳 120.48.80.70

🇿🇦 20.87.219.67

🇪🇹 196.189.116.182

🇧🇷 189.113.47.155

🇭🇰 118.193.39.103

🇨🇳 116.62.117.216

🇺🇸 66.228.41.127

🇬🇧 45.82.76.105

🇳🇱 176.65.139.218

🇦🇹 152.53.0.56

🇹🇼 111.70.23.240