JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.16.140

106.75.16.140 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.16.140

Whois 106.75.16.140

IP Abuse Reports for 106.75.16.140:

This IP address has been reported a total of 210 times from 66 distinct sources. 106.75.16.140 was first reported on April 29th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 centurion	2026-05-25 08:00:54 (1 week ago)	Blocked by UFW on dc00 [6379/tcp] Source port: 35006 TTL: 38 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on dc00 [6379/tcp] Source port: 35006 TTL: 38 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-05-25 02:50:18 (1 week ago)	2026-05-25T02:50:18+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-05-25T02:50:18+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=106.75.16.140 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=33178 DF PROTO=TCP SPT=48162 DPT=6379 WINDOW=64952 RES=0x00 SYN URGP=0 2026-05-26T00:54:42+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=106.75.16.140 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=39235 DF PROTO=TCP SPT=26234 DPT=6379 WINDOW=64952 RES=0x00 SYN URGP=0 show less	Hacking
🇨🇭 pingusurmars	2026-05-25 02:13:27 (1 week ago)	Blocked by UFW on amperetwo [6379/tcp] Source port: 30908 TTL: 38 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [6379/tcp] Source port: 30908 TTL: 38 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 VXG-NET	2026-05-24 20:39:06 (1 week ago)	port=6379, indicator_type=scan	Port Scan
🇩🇪 heyzg	2026-05-24 19:32:47 (1 week ago)	HTTP honeypot \| Persistence Install + Defense Evasion \| 35 cmds, 1 HTTP, 41s \| tactics: cron persist ... show more HTTP honeypot \| Persistence Install + Defense Evasion \| 35 cmds, 1 HTTP, 41s \| tactics: cron persistence \| ext IPs: 47[.]242[.]76[.]5 show less	Hacking Exploited Host SSH
🇨🇭 TOCE	2026-05-24 17:54:13 (1 week ago)	269 hits seen on 2026-05-24, ports 6379 (REDIS) on a honeypot from www.toce.ch	Port Scan
🇷🇴 abuse_IP_reporter	2026-05-24 17:45:02 (1 week ago)	May 24 20:29:53 server UFW BLOCK SRC=106.75.16.140 DF PROTO=TCP SPT=53652	Port Scan
🇳🇴 tmiland	2026-05-24 12:39:07 (1 week ago)	Suricata Detected 8 attacks from 106.75.16.140.; ET CINS Active Threat Intelligence Poor Reputation ... show more Suricata Detected 8 attacks from 106.75.16.140.; ET CINS Active Threat Intelligence Poor Reputation IP group 149; IP: 106.75.16.140; Ports: 56460; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇹🇷 Squearex	2026-05-24 12:27:57 (1 week ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 6379)	Brute-Force SSH
🇩🇪 guldkage	2026-05-24 12:27:33 (1 week ago)	Unauthorized connection attempt detected from IP address 106.75.16.140 to port 6379 (ger-02) [REDIS]	Exploited Host
🇩🇪 manuelisus	2026-05-24 09:19:49 (1 week ago)	Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +10: ... show more Honeypot REDIS: +10: honeypot_connection, +15: short_automated_session, +20: redis_info_recon, +10: os_server_linux, +50: abuseipdb_score_high show less	Hacking
🇩🇪 genokrad	2026-05-24 07:16:01 (1 week ago)	Unauthorized connection attempt on TCP/6379 (Redis)	Port Scan
🇩🇪 sledzik1984	2026-05-23 22:33:30 (1 week ago)	2026-05-24T00:33:15.717583+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.14 ... show more 2026-05-24T00:33:15.717583+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.140 port 16856 ssh2 2026-05-24T00:33:18.919321+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.140 port 16856 ssh2 2026-05-24T00:33:22.281765+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.140 port 16856 ssh2 2026-05-24T00:33:26.197074+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.140 port 16856 ssh2 2026-05-24T00:33:29.855368+02:00 pbs sshd-session[22995]: Failed password for root from 106.75.16.140 port 16856 ssh2 ... show less	Brute-Force SSH
🇩🇪 arc21	2026-05-23 22:23:59 (1 week ago)	2026-05-23T22:23:43.212875+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106. ... show more 2026-05-23T22:23:43.212875+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106.75.16.140 port 20618 ssh2 2026-05-23T22:23:47.997153+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106.75.16.140 port 20618 ssh2 2026-05-23T22:23:51.727377+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106.75.16.140 port 20618 ssh2 2026-05-23T22:23:54.972278+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106.75.16.140 port 20618 ssh2 2026-05-23T22:23:58.896428+00:00 game.expanse.host sshd[1699544]: Failed password for root from 106.75.16.140 port 20618 ssh2 ... show less	Brute-Force SSH
🇹🇷 0xi	2026-05-23 22:00:23 (1 week ago)	SSH brute-force attack detected (86 attempts). Targeted ports: 6379, 22. Triggered sensors: Redishon ... show more SSH brute-force attack detected (86 attempts). Targeted ports: 6379, 22. Triggered sensors: Redishoneypot, P0f, Cowrie, Suricata, ssh-rsa. Observed via distributed honeypot network. show less	Brute-Force SSH

Showing 76 to 90 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.235.30.25

🇮🇩 103.191.14.243

🇯🇵 8.216.18.59

🇬🇧 2a06:4880:4000::68

🇨🇳 220.181.108.158

🇬🇧 213.166.84.49

🇬🇧 195.140.214.20

🇺🇸 162.216.150.20

🇵🇪 161.132.37.31

🇺🇸 107.150.105.153

🇲🇲 103.59.163.135

🇯🇵 101.36.104.242

🇺🇸 216.25.89.69

🇳🇱 212.30.37.6

🇹🇳 196.235.198.51

🇦🇷 190.183.22.64

🇨🇳 183.131.87.233

🇲🇳 66.181.171.136

🇳🇱 45.148.10.121

🇮🇳 14.194.125.58