JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.191.112

106.75.191.112 was found in our database!

This IP was reported 1,573 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.191.112

Whois 106.75.191.112

IP Abuse Reports for 106.75.191.112:

This IP address has been reported a total of 1,573 times from 127 distinct sources. 106.75.191.112 was first reported on February 6th 2021, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-23 17:33:23 (22 minutes ago)	2026-06-23T18:33:22.983796+01:00 vps kernel: [43976150.403719] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-23T18:33:22.983796+01:00 vps kernel: [43976150.403719] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=106.75.191.112 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=46958 PROTO=TCP SPT=58914 DPT=1224 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-06-23 16:01:55 (1 hour ago)	tcp/54321 (4 or more attempts)	Port Scan
🇺🇸 anon333	2026-06-23 13:33:09 (4 hours ago)	Hacker syslog review 1782221588	Hacking
🇬🇧 OptimusGO	2026-06-23 12:41:33 (5 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-23 13:41:32 UTC Log evidence: 06/23/2026-13:41:31.806475 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 106.75.191.112:58914 -> 185.127.18.66:5432 06/23/2026-13:41:31.806475 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 106.75.191.112:58914 -> 185.127.18.66:5432 show less	Port Scan Brute-Force
🇮🇩 hermawan	2026-06-23 05:25:46 (12 hours ago)	06/23/2026-12:25:45.349037 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification ... show more 06/23/2026-12:25:45.349037 [Drop] [] [1:741481:3] Suricata ET扫描NMAP-sS窗口1024 [] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 106.75.191.112:58914 -> 103.166.156.58:442 ... show less	Email Spam Hacking
🇦🇹 centurion	2026-06-23 03:29:53 (14 hours ago)	Blocked by UFW on cloud [7700/tcp] Source port: 58914 TTL: 237 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on cloud [7700/tcp] Source port: 58914 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-23 03:26:24 (14 hours ago)	2026-06-23T06:26:23.474715+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-23T06:26:23.474715+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=106.75.191.112 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=43258 PROTO=TCP SPT=58914 DPT=6688 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 StopAbuse	2026-06-22 23:44:36 (18 hours ago)	tcp/431	Port Scan
🇩🇪 iNetWorker	2026-06-22 22:30:50 (19 hours ago)	firewall-block, port(s): 8187/tcp	Port Scan
🇳🇱 StopAbuse	2026-06-22 15:37:25 (1 day ago)	tcp/6333	Port Scan
🇧🇷 diego	2026-06-22 09:58:23 (1 day ago)	[rede-168-134] 06/22/2026-06:58:22.612117, 106.75.191.112, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-168-134] 06/22/2026-06:58:22.612117, 106.75.191.112, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 147 show less	Hacking
🇨🇦 Tanados	2026-06-22 08:27:05 (1 day ago)	Blocked by UFW [6688/tcp] Source port: 58914 TTL: 230 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [6688/tcp] Source port: 58914 TTL: 230 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-06-22 07:39:40 (1 day ago)	monitor: on ser162528253480 \| port: 431 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on ser162528253480 \| port: 431 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇴 tmiland	2026-06-22 07:01:45 (1 day ago)	Suricata Detected 14 attacks from 106.75.191.112.; ET CINS Active Threat Intelligence Poor Reputatio ... show more Suricata Detected 14 attacks from 106.75.191.112.; ET CINS Active Threat Intelligence Poor Reputation IP group 145; IP: 106.75.191.112; Ports: 58914; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇫🇷 Duggy_Tuxy🧱	2026-06-22 01:41:29 (1 day ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan

Showing 1 to 15 of 1573 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 158.140.166.120

🇨🇳 111.10.246.236

🇮🇹 87.241.8.35

🇹🇷 87.76.135.53

🇰🇷 20.214.174.141

🇬🇧 217.146.80.114

🇳🇱 185.242.226.85

🇺🇸 107.150.98.168

🇮🇳 103.245.34.226

🇫🇷 83.194.93.43

🇱🇻 81.30.98.144

🇫🇷 80.65.211.49

🇺🇸 66.132.172.232

🇹🇷 62.76.230.226

🇫🇷 51.91.52.214

🇧🇪 34.156.134.140

🇹🇷 5.181.87.223

🇬🇧 213.171.208.62

🇭🇰 118.193.47.212

🇳🇵 103.130.207.227