JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.21.80

106.75.21.80 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 76%: ?

76%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS9808
Hostname(s)	go5nlkm.cn
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.21.80

Whois 106.75.21.80

IP Abuse Reports for 106.75.21.80:

This IP address has been reported a total of 268 times from 137 distinct sources. 106.75.21.80 was first reported on April 26th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-07-08 13:58:01 (17 hours ago)	Honeypot hit: HTTP/1.1 request on 2010 GET / Accept: /; 2010 [5] TCP	Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-08 09:43:47 (21 hours ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 49158 [6] TCP	Port Scan
🇩🇪 dispaisyenterprises	2026-07-07 23:16:53 (1 day ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 16010 GET /master-status Accept: /; 16010 [6] TCP ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 16010 GET /master-status Accept: /; 16010 [6] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 sandra361	2026-07-07 06:28:43 (2 days ago)	Port scan detected: 22 attempts across 1 port (2396). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=106.75.2 ... show more Port scan detected: 22 attempts across 1 port (2396). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=106.75.21.80 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=3409 DF PROTO=TCP SPT=57608 DPT=2396 WINDOW=1414 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-07-07 05:18:58 (2 days ago)	Port scan detected on port 5903 (connection without data transfer)	Port Scan
🇬🇧 gbzret4d	2026-07-06 07:21:51 (3 days ago)	Honeypot [uk-production01]: Unauthorized traffic (144 bytes of payload); 3260 [7] TCP	Port Scan
🇺🇸 drewf.ink	2026-07-06 03:57:35 (3 days ago)	[03:57] Port scanning. Port(s) scanned: TCP/61616	Port Scan
🇬🇧 sandra361	2026-07-05 22:51:33 (3 days ago)	Port scan detected: 22 attempts across 1 port (9200). \| Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=106.75 ... show more Port scan detected: 22 attempts across 1 port (9200). \| Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=106.75.21.80 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=45635 DF PROTO=TCP SPT=15388 DPT=9200 WINDOW=1414 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-07-05 11:27:53 (3 days ago)	Honeypot hit: Unauthorized traffic (110 bytes of payload); 9002 [6] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (110 bytes of payload); 9002 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 BIV	2026-07-05 05:50:13 (4 days ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 8006. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 8006. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
Anonymous	2026-07-05 04:45:53 (4 days ago)	Honeypot hit: HTTP/1.1 request on 19888 GET / Accept: /; 19888 [5] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 19888 GET / Accept: /; 19888 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 donarev419	2026-07-05 04:22:21 (4 days ago)	Connection to port 5802 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:5802 ... show more Connection to port 5802 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:5802 Accept: / show less	Port Scan Hacking
🇨🇭 ScanThe.Net	2026-07-05 01:19:37 (4 days ago)	ID: 4833167788 \| PORT: 32414 \| https://106-75-21-80.scanthe.net	Port Scan
🇩🇪 dispaisyenterprises	2026-07-04 14:57:55 (4 days ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 7014 GET / Accept: /; 7014 [5] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 7014 GET / Accept: /; 7014 [5] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-07-04 06:03:40 (5 days ago)	Honeypot hit: HTTP/1.1 request on 8545 POST / Accept: / POST Data: {"jsonrpc":"2.0","method":"web ... show more Honeypot hit: HTTP/1.1 request on 8545 POST / Accept: / POST Data: {"jsonrpc":"2.0","method":"web3_clientVersion","params":[],"id":67}; 8545 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a00:fbc:ea7f:a234:c073:93ef:b456:5801

🇸🇬 178.128.103.162

🇮🇳 103.213.194.44

🇫🇷 91.231.89.104

🇺🇸 85.254.129.68

🇫🇷 77.237.247.42

🇳🇱 77.83.39.197

🇨🇦 46.203.154.190

🇩🇪 2a00:fbc:ea7f:a234:782d:490b:a2ad:8ea8

🇰🇷 218.52.254.90

🇧🇷 201.63.52.54

🇦🇷 190.221.50.122

🇺🇸 162.216.149.247

🇺🇸 144.172.95.215

🇨🇳 116.179.33.137

🇮🇳 103.50.215.52

🇧🇬 79.124.49.174

🇺🇸 74.125.224.77

🇺🇸 64.62.156.70

🇺🇸 8.235.71.172