106.75.254.52
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Shanghai UCloud Information Technology Company Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS17621
- Domain Name
- ucloud.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
16 from
16 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Kolo |
WhoTouchedMySSH honeypot SSH bruteforce from 106.75.254.52 (Shanghai, CN)
|
Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
|
Brute-Force | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇩🇪 jann |
Honeypot: connection to unused port 2222 at 2026-11-09 17:34:55 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇩🇪 EndCore Group |
|
Brute-Force SSH | |
| 🇺🇸 hl.admin |
|
Brute-Force SSH | |
| 🇩🇪 zerodaysystemde |
Port (22 tcp) Scanner - SSH - HoneyPot
|
Port Scan SSH | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: SSH (9 total hits)
|
Brute-Force SSH | |
| 🇨🇳 Pumilk |
SSH brute-force (5 failed logins), auto-banned by fail2ban
|
Brute-Force SSH | |
| 🇮🇹 alph44 |
SSH brute force attack detected: 5 failed attempts
|
Brute-Force | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 10002 [1] TCP
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-07T16:05:19.264Z ACCEPT host=106.75.254.52 port=48332 fd=9 n=6/8192
|
Brute-Force SSH | |
| 🇬🇧 ByteGuard Security Systems |
Automated SSH intrusion attempt matched fail2ban's sshd jail: 3 failed password attempt(s) out of 10 connection event(s), starting 2026-11-07T11:31:55+03:00. Usernames tried: root.
|
Brute-Force SSH | |
| 🇪🇸 yvoictra |
|
Brute-Force SSH | |
| 🇩🇪 dominikdomex |
SSH brute-force attempts (fail2ban)
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown