JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.8.241

106.75.8.241 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.8.241

Whois 106.75.8.241

IP Abuse Reports for 106.75.8.241:

This IP address has been reported a total of 54 times from 28 distinct sources. 106.75.8.241 was first reported on July 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-07-16 02:45:32 (1 day ago)	Connection to port 994 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:994 A ... show more Connection to port 994 with data transfer. Data preview: GET / HTTP/1.1 Host: 109.110.170.76:994 Accept: / show less	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-07-15 12:16:01 (2 days ago)	Honeypot hit: Unauthorized traffic (247 bytes of payload); 37810 [5] TCP	Port Scan
🇺🇸 sandra361	2026-07-15 09:18:44 (2 days ago)	Port scan detected: 14 attempts across 1 port (30021). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=106. ... show more Port scan detected: 14 attempts across 1 port (30021). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=106.75.8.241 LEN=98 TOS=0x00 PREC=0x00 TTL=38 ID=4268 DF PROTO=TCP SPT=56474 DPT=30021 WINDOW=1414 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇹🇷 Squearex	2026-07-15 06:40:56 (2 days ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 3389)	Brute-Force SSH
🇫🇷 Thaliruth	2026-07-15 04:12:38 (2 days ago)	Jul 15 06:12:34 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 2 sec ... show more Jul 15 06:12:34 151 dovecot: pop3-login: Login aborted: Connection closed (no auth attempts in 2 secs) (no_auth_attempts): user=<>, rip=106.75.8.241, lip=46.252.194.151, TLS, session=<FoFciJ5WtKFqSwjx> Jul 15 06:12:35 151 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A0000EB:SSL routines::no application protocol (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=106.75.8.241, lip=46.252.194.151, TLS handshaking: SSL_accept() failed: error:0A0000EB:SSL routines::no application protocol, session=<jY2AiJ5WdqNqSwjx> Jul 15 06:12:37 151 dovecot: pop3-login: Login aborted: Connection closed: SSL_accept() failed: error:0A0000EB:SSL routines::no application protocol (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=106.75.8.241, lip=46.252.194.151, TLS handshaking: SSL_accept() failed: error:0A0000EB:SSL routines::no application protocol, session=<4aSjiJ5WTqZqSwjx> ... show less	Hacking Brute-Force
🇦🇺 LiftUp Hosting	2026-07-15 03:57:59 (2 days ago)	Honeypot hit: Unauthorized traffic (24 bytes of payload); 4786 [6] TCP	Port Scan
🇨🇦 senkodev	2026-07-14 19:44:52 (2 days ago)	2026-07-14T19:44:51.634742Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 106.75.8.2 ... show more 2026-07-14T19:44:51.634742Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 106.75.8.241:27922 (158.69.22.11:2223) [session: 20cc510f76bb] 2026-07-14T19:44:52.216457Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 106.75.8.241:28334 (158.69.22.11:2223) [session: a1d74e783c7d] ... show less	Brute-Force SSH
🇹🇼 tyetriiix	2026-07-14 15:09:08 (3 days ago)	Wazuh Alert Evidence: 106.75.8.241 - - [14/Jul/2026:15:09:05 +0000] "GET / HTTP/1.1" 400 150 "-" "NT ... show more Wazuh Alert Evidence: 106.75.8.241 - - [14/Jul/2026:15:09:05 +0000] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇺🇸 donarev419	2026-07-14 05:42:20 (3 days ago)	Connection to port 2082 with data transfer. Data preview:	Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-14 05:27:29 (3 days ago)	Honeypot hit: Unauthorized traffic (15 bytes of payload); 5111 [6] TCP	Port Scan
🇺🇸 kosada.com	2026-07-14 00:11:01 (3 days ago)	Web vulnerability probing: / (bogus vhost/SNI)	Web App Attack
🇩🇪 Mailguard-FRD	2026-07-13 17:50:43 (3 days ago)	1783965042 - 07/13/2026 19:50:42 Host: 106.75.8.241/106.75.8.241 Port: 79 TCP Blocked ...	Port Scan
🇩🇪 femboy.cat	2026-07-13 16:34:47 (3 days ago)	Port scan to tcp/11300 from 106.75.8.241	Brute-Force
🇦🇹 nomzamo	2026-07-13 16:21:52 (3 days ago)	Fail2Ban reported: nginx-bad-request	Brute-Force
🇩🇪 MaxMeier	2026-07-13 14:03:52 (4 days ago)	106.75.8.241 - - [13/Jul/2026:16:02:50 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\ ... show more 106.75.8.241 - - [13/Jul/2026:16:02:50 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 106.75.8.241 - - [13/Jul/2026:16:02:52 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 106.75.8.241 - - [13/Jul/2026:16:02:54 +0200] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 106.75.8.241 - - [13/Jul/2026:16:03:03 +0200] "GET /version HTTP/1.1" 444 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.141

🇧🇷 193.228.74.98

🇻🇳 180.93.115.189

🇺🇸 147.185.132.66

🇮🇳 103.183.31.223

🇷🇺 95.24.167.42

🇺🇸 191.102.162.49

🇺🇸 181.41.206.227

🇳🇱 146.103.114.214

🇺🇸 98.90.43.197

🇩🇪 62.54.176.203

🇳🇱 45.148.10.141

🇨🇦 20.151.10.178

🇯🇵 8.216.84.79

🇺🇸 159.223.148.3

🇫🇷 91.196.152.201

🇺🇸 67.164.45.65

🇬🇧 35.203.210.254

🇻🇳 14.226.70.109

🇻🇳 14.225.253.26