AbuseIPDB » 106.75.223.170

106.75.223.170 was found in our database!

This IP was reported 2,410 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS17621
Hostname(s)	mail.bd190ovhfr.cn nqtw02.cn
Domain Name	ucloud.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 106.75.223.170

Whois 106.75.223.170

IP Abuse Reports for 106.75.223.170:

This IP address has been reported a total of 2,410 times from 696 distinct sources. 106.75.223.170 was first reported on April 26th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Porter	2025-05-12 02:34:47 (5 days ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-05-10 03:29:53 (1 week ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
rtbh.com.tr	2025-05-05 20:06:28 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-04 20:06:27 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
VHosting	2025-05-04 01:29:42 (1 week ago)	Attempt from 106.75.223.170	Brute-Force SSH
ThreatBook.io	2025-05-04 00:35:18 (1 week ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/106.75.223.170	SSH
Study Bitcoin 🤗	2025-05-04 00:24:38 (1 week ago)	Port probe to tcp/22 (ssh) [srv132]	Port Scan Brute-Force SSH
Deep Cave	2025-05-03 22:40:40 (1 week ago)	May 3 15:22:28 stories sshd[1635313]: Invalid user wow from 106.75.223.170 port 34912 May 3 ... show moreMay 3 15:22:28 stories sshd[1635313]: Invalid user wow from 106.75.223.170 port 34912 May 3 15:27:01 stories sshd[1635759]: Invalid user tempuser from 106.75.223.170 port 50440 May 3 15:29:49 stories sshd[1636038]: Invalid user admin from 106.75.223.170 port 42652 May 3 15:32:33 stories sshd[1636335]: Invalid user zrwang from 106.75.223.170 port 40690 May 3 15:40:40 stories sshd[1637143]: Invalid user talked from 106.75.223.170 port 43562 ... show less	Brute-Force SSH
R-bear	2025-05-03 21:33:49 (1 week ago)	May 3 21:10:26 synth sshd[2164121]: Disconnected from authenticating user root 106.75.223.170 port ... show moreMay 3 21:10:26 synth sshd[2164121]: Disconnected from authenticating user root 106.75.223.170 port 59156 [preauth] May 3 21:23:35 synth sshd[2166340]: Disconnected from authenticating user root 106.75.223.170 port 49646 [preauth] May 3 21:25:54 synth sshd[2166752]: Disconnected from authenticating user root 106.75.223.170 port 59364 [preauth] May 3 21:27:53 synth sshd[2167102]: Invalid user test from 106.75.223.170 port 53958 May 3 21:27:53 synth sshd[2167102]: Disconnected from invalid user test 106.75.223.170 port 53958 [preauth] May 3 21:29:55 synth sshd[2167450]: Invalid user didi from 106.75.223.170 port 55432 May 3 21:29:55 synth sshd[2167450]: Disconnected from invalid user didi 106.75.223.170 port 55432 [preauth] May 3 21:31:53 synth sshd[2167797]: Invalid user ubuntu from 106.75.223.170 port 36676 May 3 21:31:54 synth sshd[2167797]: Disconnected from invalid user ubuntu 106.75.223.170 port 36676 [preauth] May 3 21:33:48 synth sshd[2168120]: Invalid user hadoop from 1 ... show less	Brute-Force SSH
rtbh.com.tr	2025-05-03 20:06:25 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
robotstxt	2025-05-03 19:38:37 (1 week ago)	2025-05-03T19:30:35.457185+00:00 widevents-viatris sshd[273335]: Invalid user fd from 106.75.223.170 ... show more2025-05-03T19:30:35.457185+00:00 widevents-viatris sshd[273335]: Invalid user fd from 106.75.223.170 port 39272 2025-05-03T19:34:37.737327+00:00 widevents-viatris sshd[273527]: Invalid user amir from 106.75.223.170 port 35668 2025-05-03T19:38:36.736889+00:00 widevents-viatris sshd[273724]: Invalid user taibabi from 106.75.223.170 port 43758 ... show less	Brute-Force
wawa_marek	2025-05-03 15:39:26 (1 week ago)	2025-05-03T17:39:24.151235+02:00 s1 sshd[2694188]: Invalid user taibabi from 106.75.223.170 port 459 ... show more2025-05-03T17:39:24.151235+02:00 s1 sshd[2694188]: Invalid user taibabi from 106.75.223.170 port 45900 2025-05-03T17:39:24.153756+02:00 s1 sshd[2694188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.223.170 2025-05-03T17:39:26.347669+02:00 s1 sshd[2694188]: Failed password for invalid user taibabi from 106.75.223.170 port 45900 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-05-03 15:17:02 (1 week ago)	2025-05-03T14:32:13.765611+00:00 de-fra2-dns2 sshd[1546561]: Invalid user postgres from 106.75.223.1 ... show more2025-05-03T14:32:13.765611+00:00 de-fra2-dns2 sshd[1546561]: Invalid user postgres from 106.75.223.170 port 57846 2025-05-03T14:42:09.125562+00:00 de-fra2-dns2 sshd[1546911]: Invalid user k2024 from 106.75.223.170 port 49336 2025-05-03T15:17:01.655687+00:00 de-fra2-dns2 sshd[1547831]: Invalid user federico from 106.75.223.170 port 52198 ... show less	Brute-Force SSH
wawa_marek	2025-05-03 14:29:47 (1 week ago)	2025-05-03T16:24:49.939781+02:00 s1 sshd[2692632]: pam_unix(sshd:auth): authentication failure; logn ... show more2025-05-03T16:24:49.939781+02:00 s1 sshd[2692632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.223.170 2025-05-03T16:24:52.459657+02:00 s1 sshd[2692632]: Failed password for invalid user zomboid from 106.75.223.170 port 56040 ssh2 2025-05-03T16:29:46.720204+02:00 s1 sshd[2692718]: Invalid user postgres from 106.75.223.170 port 32848 ... show less	Brute-Force SSH
paradoxnetworks	2025-05-03 11:48:59 (1 week ago)	2025-05-03T11:39:57.127065+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[2120570]: Invalid user amir from ... show more2025-05-03T11:39:57.127065+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[2120570]: Invalid user amir from 106.75.223.170 port 55312 2025-05-03T11:44:23.069849+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[2121494]: Invalid user ty from 106.75.223.170 port 59328 2025-05-03T11:48:59.281933+00:00 edge-hiv-tpa01.int.pdx.net.uk sshd[2122441]: Invalid user eli from 106.75.223.170 port 38120 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩