AbuseIPDB » 106.75.157.75

106.75.157.75 was found in our database!

This IP was reported 2,619 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	ucloud.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 106.75.157.75

Whois 106.75.157.75

IP Abuse Reports for 106.75.157.75:

This IP address has been reported a total of 2,619 times from 304 distinct sources. 106.75.157.75 was first reported on July 1st 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TheSurvivingCatalyst	2024-10-02 05:53:34 (3 days ago)	POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 \| POST /cgi-bin/%%32 ... show morePOST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 \| POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1 \| POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1 \| GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 \| GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1 \| GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 \| GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1 \| GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1 \| GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 \| GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 show less	Brute-Force
Joe-Mark	2024-09-29 13:00:11 (6 days ago)	Found Matty Roberts Blocklist / proto=6 . srcport=12785 . dstport=22 SSH . (876)	Port Scan
Admins@FBN	2024-09-29 08:20:42 (6 days ago)	FW-PortScan: Traffic Blocked srcport=28308 dstport=22	Port Scan Hacking SSH
polido	2024-09-29 08:10:47 (6 days ago)	Unauthorized connection attempt to port 443 from 106.75.157.75	Port Scan
nfsec.pl	2024-09-29 07:45:41 (6 days ago)	Sep 29 09:45:39 stardust sshd[259949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreSep 29 09:45:39 stardust sshd[259949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.75 Sep 29 09:45:40 stardust sshd[259949]: Failed password for invalid user nova from 106.75.157.75 port 47764 ssh2 ... show less	Brute-Force SSH
gu-alvareza	2024-09-29 07:05:19 (6 days ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
diego	2024-09-29 06:41:01 (6 days ago)	Events: TCP SYN Discovery or Flooding, Seen 7 times in the last 10800 seconds	DDoS Attack
drewf.ink	2024-09-29 06:10:00 (6 days ago)	[06:10] Attempted SSH login on port 22 with credentials root:c8h10n4o2	Brute-Force SSH
sid3windr	2024-09-29 05:51:51 (6 days ago)	SSH port scan (Tarpitted for 18m21s, wasted 1.75kB)	Port Scan SSH
gac	2024-09-29 05:14:50 (6 days ago)	Sep 29 07:14:24 41nt sshd[3932827]: Failed password for root from 106.75.157.75 port 36034 ssh2<br / ... show moreSep 29 07:14:24 41nt sshd[3932827]: Failed password for root from 106.75.157.75 port 36034 ssh2 Sep 29 07:14:35 41nt sshd[3932866]: Invalid user bridge from 106.75.157.75 port 53304 Sep 29 07:14:35 41nt sshd[3932866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.75 Sep 29 07:14:37 41nt sshd[3932866]: Failed password for invalid user bridge from 106.75.157.75 port 53304 ssh2 Sep 29 07:14:49 41nt sshd[3932915]: Invalid user mit from 106.75.157.75 port 49834 ... show less	Brute-Force SSH
Grizzlytools	2024-09-29 05:05:12 (6 days ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
rtbh.com.tr	2024-09-29 04:54:12 (6 days ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
technojoe99	2024-09-29 04:53:07 (6 days ago)	Attempted SSH connection from 106.75.157.75 port 22744 in apnic; no valid users in that region	Port Scan SSH
Hulk Smash	2024-09-29 04:53:05 (6 days ago)	Automated report, webserver-auth troll for exploits and/or SSH Attempts	Hacking Brute-Force
diego	2024-09-29 04:37:26 (6 days ago)	Events: TCP SYN Discovery or Flooding, Seen 9 times in the last 10800 seconds	DDoS Attack