JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.144.203

106.75.144.203 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 28%: ?

28%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.144.203

Whois 106.75.144.203

IP Abuse Reports for 106.75.144.203:

This IP address has been reported a total of 19 times from 9 distinct sources. 106.75.144.203 was first reported on January 18th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-23 14:52:20 (1 day ago)	Blocked by UFW (TCP on 80) Source port: 62964 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 62964 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 106.75.144.203) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 NXTwoThou	2026-06-15 20:36:21 (1 week ago)	Subdomain exploit hunting	Port Scan
🇸🇪 KIDOS	2026-06-02 13:11:23 (3 weeks ago)	Apache monitor: ssrf_log_spoofing	Brute-Force SSH
🇨🇿 huginet	2026-06-02 12:16:26 (3 weeks ago)	106.75.144.203 - - [02/Jun/2026:14:16:22 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (Windows ... show more 106.75.144.203 - - [02/Jun/2026:14:16:22 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.144.203 - - [02/Jun/2026:14:16:24 +0200] "GET /favicon.ico HTTP/1.1" 403 32175 "http://193.165.127.126:80" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Web Spam Web App Attack
🇬🇧 PeravixGroup	2026-05-25 11:40:54 (4 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-21 02:35:44 (1 month ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇵🇱 sefinek.net	2026-04-03 04:42:28 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 wteiken	2026-03-14 22:48:24 (3 months ago)	2026-03-14T18:48:14.075290-04:00 nostromo.teiken.net kernel: [22695.642729] syn_limit:IN=en-wan OUT= ... show more 2026-03-14T18:48:14.075290-04:00 nostromo.teiken.net kernel: [22695.642729] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=106.75.144.203 DST=108.14.99.152 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=32182 DF PROTO=TCP SPT=36472 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-03-14T18:48:17.075347-04:00 nostromo.teiken.net kernel: [22698.646888] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=106.75.144.203 DST=108.14.99.152 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=27289 DF PROTO=TCP SPT=36484 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-03-14T18:48:18.105292-04:00 nostromo.teiken.net kernel: [22699.678518] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=106.75.144.203 DST=108.14.99.152 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=27290 DF PROTO=TCP SPT=36484 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-03-14T18:48:20.085286-04:00 nostromo.teiken.net kernel: [22701.654958] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇨🇳 ThreatBook.io	2026-03-10 23:12:11 (3 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.144.203 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.144.203 2026-03-10 23:01:15 / show less	Web App Attack
🇫🇷 masterguru	2026-02-10 06:43:34 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-02-08 01:58:33 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-02-07 15:27:49 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-01-29 03:21:07 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-01-28 22:30:13 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-24 02:04:56 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.144.203 (CN/China/-): 1 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 154.195.17.82

🇳🇱 204.76.203.219

🇧🇪 198.235.24.164

🇪🇹 196.188.93.169

🇫🇷 91.231.89.68

🇱🇻 81.30.98.49

🇬🇧 172.217.32.86

🇨🇳 106.115.179.19

🇻🇳 103.90.227.203

🇩🇪 95.90.13.168

🇧🇬 78.128.114.166

🇺🇸 52.176.211.73

🇨🇳 14.103.41.249

🇳🇱 176.65.139.88

🇺🇸 170.187.163.117

🇹🇭 118.27.146.111

🇨🇳 36.151.68.6

🇧🇬 79.124.62.230

🇳🇱 45.148.10.152

🇨🇳 1.30.25.16