JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.16.140

106.75.16.140 was found in our database!

This IP was reported 213 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.16.140

Whois 106.75.16.140

IP Abuse Reports for 106.75.16.140:

This IP address has been reported a total of 213 times from 66 distinct sources. 106.75.16.140 was first reported on April 29th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-06-04 05:27:50 (5 hours ago)	Connection to port 6379 with data transfer. Data preview: info server	Port Scan Hacking
🇨🇦 Slackin' Jack	2026-06-04 03:48:27 (6 hours ago)	Triggered honeypot on port 6379. (106.75.16.140)	Port Scan
Anonymous	2026-06-04 02:54:23 (7 hours ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of lo ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of login attempts: 1 • 15 command(s) were executed during the session • Client: SSH-2.0-makiko • SSH key fingerprints: 08:7f:9f:39:72:34:9e:c3:66:17:5b:f0:a8:7c:50:08 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH Hacking
Anonymous	2026-06-03 20:53:45 (13 hours ago)	Portscan: TCP/6379 (34x)	Port Scan
🇮🇩 hermawan	2026-06-03 17:00:21 (17 hours ago)	1780506013.271217 106.75.16.140 103.166.156.58 64952_2-4-8-1-3_1412_9 2026-06-04 00:00:13 WIB ...	Email Spam Hacking
🇭🇰 PingMeMaybe	2026-06-03 16:29:18 (18 hours ago)	Blocked by UFW on hk [6379/tcp] Source port: 48218 TTL: 43 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on hk [6379/tcp] Source port: 48218 TTL: 43 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-03 16:29:00 (18 hours ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-makiko	Hacking SSH Port Scan
🇩🇪 kingjan1999	2026-06-03 15:07:36 (19 hours ago)	Blocked by UFW [6379/tcp] \| SPT: 25588 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [6379/tcp] \| SPT: 25588 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 NxtGenIT	2026-06-03 14:20:08 (20 hours ago)	Redishoneypot Honeypot hit, Action: NewConnect	IoT Targeted
🇩🇪 manuelisus	2026-06-03 14:06:41 (20 hours ago)	Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +10: ... show more Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +10: os_server_linux, +50: abuseipdb_score_high show less	Hacking
🇨🇦 design2web.ca	2026-06-03 07:12:23 (1 day ago)	[UniFi FW] Redis unauthorized access attempt on port 6379 (Redis) \| Policy: Region Blocking \| Proto: ... show more [UniFi FW] Redis unauthorized access attempt on port 6379 (Redis) \| Policy: Region Blocking \| Proto: TCP \| Src: 106.75.16.140:63486 \| SrcRegion: CN \| Detected: 2026-06-03 06:09:10 UTC \| ISP: UCLOUD \| D2W UniFi AbuseIPDB Reporter v2 show less	Port Scan
🇫🇷 centurion	2026-06-03 06:36:09 (1 day ago)	Blocked by UFW on dc00 [6379/tcp] Source port: 40472 TTL: 39 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on dc00 [6379/tcp] Source port: 40472 TTL: 39 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-03 05:17:03 (1 day ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:undefined ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:undefined • Number of login attempts: 1 • 1 command(s) were executed during the session • Client: SSH-2.0-makiko • SSH key fingerprints: 08:7f:9f:39:72:34:9e:c3:66:17:5b:f0:a8:7c:50:08 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH Hacking
🇺🇸 3rdKey	2026-06-02 19:16:02 (1 day ago)	OpenCanary honeypot hit on port 6379 (no legitimate service runs there); logtype 17001. Automated re ... show more OpenCanary honeypot hit on port 6379 (no legitimate service runs there); logtype 17001. Automated report. show less	Port Scan Hacking
🇫🇮 iamxorum	2026-06-02 19:12:15 (1 day ago)	2026-06-02T19:12:15.011631+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-02T19:12:15.011631+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=106.75.16.140 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=56413 DF PROTO=TCP SPT=30288 DPT=6379 WINDOW=64952 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 213 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 188.49.90.11

🇨🇳 106.13.174.45

🇮🇳 49.43.196.203

🇳🇱 193.32.249.163

🇹🇷 176.88.159.184

🇺🇸 162.216.150.208

🇺🇸 162.216.149.193

🇮🇳 157.51.15.128

🇩🇪 139.19.117.130

🇩🇪 138.199.237.72

🇺🇸 134.209.6.73

🇦🇫 103.215.211.203

🇻🇳 103.167.89.222

🇮🇩 103.41.247.76

🇷🇺 95.179.113.71

🇫🇷 86.214.11.106

🇬🇧 86.170.147.1

🇬🇧 37.10.113.215

🇭🇰 2a09:bac1:31a0:8::3d0:70

🇨🇦 2607:f8b0:4023:1803::121