JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.142.68

106.75.142.68 was found in our database!

This IP was reported 1,067 times. Confidence of Abuse is 0%: ?

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS58466
Hostname(s)	vgkkddo.cn ijpsgfm.cn entu4.shop
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.142.68

Whois 106.75.142.68

IP Abuse Reports for 106.75.142.68:

This IP address has been reported a total of 1,067 times from 165 distinct sources. 106.75.142.68 was first reported on October 30th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2025-02-07 22:36:07 (1 year ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-02-07 19:06:19 (1 year ago)	5 port probes: tcp/21 (ftp control), tcp/7547, tcp/2000 (remotely anywhere), tcp/5061, tcp/161 (snmp ... show more 5 port probes: tcp/21 (ftp control), tcp/7547, tcp/2000 (remotely anywhere), tcp/5061, tcp/161 (snmp) [srv62] show less	FTP Brute-Force Port Scan Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-02-07 19:04:06 (1 year ago)	3 port probes: tcp/1701 (l2tp), tcp/5060 (sip), tcp/1723 (pptp) [srv62]	Port Scan Hacking
🇳🇱 Study Bitcoin 🤗	2025-02-07 16:16:53 (1 year ago)	8 port probes: tcp/3306 (mysql), tcp/80 (http), tcp/443 (https), tcp/4001 (cisco mgmt), tcp/111 (sun ... show more 8 port probes: tcp/3306 (mysql), tcp/80 (http), tcp/443 (https), tcp/4001 (cisco mgmt), tcp/111 (sun remote procedure call), tcp/8080 (http), tcp/110 (post office- version 3), tcp/2222 (rockwell csp2) [srv134] show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇯🇵 Kinsei Engineering Inc.	2025-02-07 13:21:13 (1 year ago)	UFW:High-frequency access to unused ports	Port Scan
🇩🇪 marcel-knorr.de	2025-02-07 08:18:33 (1 year ago)	[mail-backup-1] Blocked by UFW	Port Scan Brute-Force
🇳🇱 kumiko	2025-02-07 07:18:57 (1 year ago)	[2025-02-07 07:18:56] Unauthorized port scan/probing (3 times on ports 2095, 8083, 49152) Blocked b ... show more [2025-02-07 07:18:56] Unauthorized port scan/probing (3 times on ports 2095, 8083, 49152) Blocked by UFW show less	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-02-07 06:00:45 (1 year ago)	12 port probes: tcp/901 (samba web administration tool), tcp/2095 (nbx ser), tcp/22 (ssh), tcp/20000 ... show more 12 port probes: tcp/901 (samba web administration tool), tcp/2095 (nbx ser), tcp/22 (ssh), tcp/20000 (dnp), tcp/8880 (cddbp), tcp/9200 (wap connectionless session service), tcp/143 (internet message access), tcp/8181 (ipswitch imail), tcp/25 (smtp), tcp/111 (sun remote procedure call), tcp/21 (ftp control), tcp/3000 (remoteware client) [srv125] show less	FTP Brute-Force Email Spam Port Scan Brute-Force SSH
🇧🇷 diego	2025-02-07 02:11:57 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 7 times in the last 10800 seconds	DDoS Attack
🇧🇷 OuverneY	2025-02-07 01:54:55 (1 year ago)	FW-PortScan: Traffic Blocked (Port=7547 <- 49 attempts), (Port=1701 <- 45 attempts), (Port=520 <- 4 ... show more FW-PortScan: Traffic Blocked (Port=7547 <- 49 attempts), (Port=1701 <- 45 attempts), (Port=520 <- 43 attempts), (Port=4433 <- 43 attempts), (Port=554 <- 40 attempts), (Port=443 <- 38 attempts), (Port=2000 <- 38 attempts), (Port=1723 <- 38 attempts), (Port=8000 <- 36 attempts), (Port=8020 <- 35 attempts), (Port=8291 <- 31 attempts), (Port=80 <- 30 attempts), (Port=9000 <- 29 attempts), (Port=161 <- 29 attempts), (Port=8888 <- 26 attempts), (Port=8080 <- 21 attempts), (Port=53 <- 14 attempts), (Port=21 <- 12 attempts), Total connections: 1201, Total destination IPs: 226 show less	Port Scan
🇺🇸 shaunc	2025-02-06 23:37:14 (1 year ago)	Feb 6 17:36:35 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC= ... show more Feb 6 17:36:35 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=106.75.142.68 DST=[redacted] LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=46789 PROTO=TCP SPT=58914 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 17:36:48 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=106.75.142.68 DST=[redacted] LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=2771 PROTO=TCP SPT=58914 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 17:37:11 mailman kernel: CLOSED_PORT_PROBE: IN=eth0 OUT= MAC=[redacted]:[redacted]:08:00 SRC=106.75.142.68 DST=[redacted] LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=31758 PROTO=TCP SPT=58914 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇨🇿 ☠\|ʂɧąɖơῳ\|☠	2025-02-06 22:58:21 (1 year ago)	[2025 Feb 6 23:58:19] Suspiciously High Count (16 x) of RST Packets / 24 Hours detected from 106.75. ... show more [2025 Feb 6 23:58:19] Suspiciously High Count (16 x) of RST Packets / 24 Hours detected from 106.75.142.68 (ijpsgfm.cn. entu4.shop. vgkkddo.cn.) 01:53:03 \| SPT=58914 > DPT=123 01:53:16 \| SPT=58914 > DPT=995 01:53:17 \| SPT=58914 > DPT=995 01:53:20 \| SPT=58914 > DPT=143 01:53:28 \| SPT=58914 > DPT=993 01:53:31 \| SPT=58914 > DPT=8080 01:53:32 \| SPT=58914 > DPT=8080 01:53:46 \| SPT=58914 > DPT=554 01:53:59 \| SPT=58914 > DPT=2000 01:54:03 \| SPT=58914 > DPT=500 show less	Hacking
Anonymous	2025-02-06 22:30:09 (1 year ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇩🇪 Linux-Tech	2025-02-06 22:13:30 (1 year ago)	Feb 6 23:11:19 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08: ... show more Feb 6 23:11:19 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=106.75.142.68 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=14178 PROTO=TCP SPT=58914 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 23:11:30 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=106.75.142.68 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=24263 PROTO=TCP SPT=58914 DPT=2087 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 23:12:09 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=106.75.142.68 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=24011 PROTO=TCP SPT=58914 DPT=49669 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 23:12:29 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:c0:69:11:b6:c7:e7:08:00 SRC=106.75.142.68 DST=173.212.244.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=13992 PROTO=TCP SPT=58914 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 6 23:13:28 hidden ... show less	Port Scan Hacking
🇩🇪 sthoyer.de	2025-02-06 22:11:44 (1 year ago)	Feb 6 23:11:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:2 ... show more Feb 6 23:11:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:b4:82:23:08:00 SRC=106.75.142.68 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=29120 PROTO=TCP SPT=58914 DPT=22 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 1067 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.236

🇲🇽 189.190.244.176

🇳🇱 185.155.220.51

🇺🇸 129.153.145.135

🇨🇳 113.104.187.231

🇲🇾 49.124.133.224

🇸🇬 47.84.102.58

🇺🇸 45.79.207.129

🇷🇴 2.57.121.112

🇺🇸 2604:a880:2:d1:0:1:51dc:3001

🇺🇸 165.154.163.107

🇻🇳 160.191.242.222

🇩🇪 140.248.75.110

🇳🇱 91.92.40.6

🇶🇦 78.101.27.232

🇮🇪 54.170.227.105

🇰🇭 202.56.3.140

🇧🇷 200.153.86.250

🇪🇬 197.199.224.52

🇩🇪 194.88.98.91