JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.9.126

106.75.9.126 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9808
Hostname(s)	an6oa5.shop
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.9.126

Whois 106.75.9.126

IP Abuse Reports for 106.75.9.126:

This IP address has been reported a total of 83 times from 39 distinct sources. 106.75.9.126 was first reported on April 1st 2022, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TAY	2026-07-16 09:57:09 (4 hours ago)	2026-07-16 17:57:09 imap-login: Info: Disconnected (no auth attempts in 1 secs): user=<>, rip=106.75 ... show more 2026-07-16 17:57:09 imap-login: Info: Disconnected (no auth attempts in 1 secs): user=<>, rip=106.75.9.126, lip=162.220.160.187, session=<9nmfdrdWxpVqSwl+> 2026-07-16 17:57:09 imap-login: Info: Disconnected (no auth attempts in 1 secs): user=<>, rip=106.75.9.126, lip=162.220.160.187, TLS handshaking: Connection closed, session=<58qfdrdWwJZqSwl+> ... show less	Brute-Force
🇺🇸 donarev419	2026-07-16 06:07:03 (8 hours ago)	Connection to port 1471 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:1471 ... show more Connection to port 1471 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:1471 Accept: / show less	Port Scan Hacking
🇳🇱 donarev419	2026-07-16 00:53:03 (13 hours ago)	Connection to port 6488 with data transfer. Data preview: JRMI	Port Scan Hacking
🇫🇷 EvoX	2026-07-15 23:41:10 (15 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 1042 GET / Accept: /; 1042 [5] TCP	Hacking Bad Web Bot
🇺🇸 sandra361	2026-07-15 09:29:44 (1 day ago)	Port scan detected: 56 attempts across 2 ports (2077,30011). \| Evidence: REAPER_TARPIT: IN=enp1s0 SR ... show more Port scan detected: 56 attempts across 2 ports (2077,30011). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=106.75.9.126 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=55016 DF PROTO=TCP SPT=52938 DPT=30011 WINDOW=1414 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-15 08:33:59 (1 day ago)	Honeypot hit: HTTP/1.1 request on 8010 GET /master-status Accept: /; 8010 [7] TCP	Hacking Bad Web Bot
🇸🇪 donarev419	2026-07-15 05:44:50 (1 day ago)	Connection to port 1443 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:1443 ... show more Connection to port 1443 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:1443 Accept: / show less	Port Scan Hacking
🇭🇰 sandra361	2026-07-14 12:54:22 (2 days ago)	Port scan detected: 34 attempts across 1 port (4842). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=106.75. ... show more Port scan detected: 34 attempts across 1 port (4842). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=106.75.9.126 LEN=40 TOS=0x14 PREC=0x00 TTL=42 ID=7045 DF PROTO=TCP SPT=25932 DPT=4842 WINDOW=1414 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 NXTwoThou	2026-07-14 08:22:53 (2 days ago)	POP3	Port Scan
🇺🇸 donarev419	2026-07-14 05:42:33 (2 days ago)	Connection to port 111 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 sandra361	2026-07-14 03:51:44 (2 days ago)	Port scan detected: 24 attempts across 1 port (8161). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=106.7 ... show more Port scan detected: 24 attempts across 1 port (8161). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=106.75.9.126 LEN=40 TOS=0x00 PREC=0x00 TTL=38 ID=13117 DF PROTO=TCP SPT=55908 DPT=8161 WINDOW=1414 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇩🇪 femboy.cat	2026-07-14 02:50:20 (2 days ago)	Port scan to tcp/10003 from 106.75.9.126	Brute-Force
🇺🇸 kosada.com	2026-07-14 00:10:55 (2 days ago)	Web vulnerability probing: / (bogus vhost/SNI)	Web App Attack
Anonymous	2026-07-13 15:01:38 (2 days ago)	Honeypot hit: HTTP/1.1 request on 55442 GET / Accept: /; 55442 [5] TCP Reported by: https://githu ... show more Honeypot hit: HTTP/1.1 request on 55442 GET / Accept: /; 55442 [5] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 donarev419	2026-07-13 05:40:38 (3 days ago)	Connection to port 1723 with data transfer. Data preview:	Port Scan Hacking

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.38.237.233

🇭🇰 199.45.154.184

🇺🇸 146.190.209.45

🇮🇳 122.166.253.226

🇩🇪 104.248.29.44

🇨🇳 101.96.199.112

🇺🇸 50.220.35.122

🇸🇬 47.84.128.115

🇺🇸 23.95.244.93

🇸🇬 209.38.59.247

🇹🇷 195.85.207.202

🇨🇳 175.4.52.243

🇹🇷 94.154.43.12

🇩🇪 64.89.163.87

🇺🇸 44.109.226.215

🇺🇸 40.124.174.133

🇻🇳 27.79.4.219

🇨🇦 20.104.96.117

🇺🇸 2a09:bac1:76c0:460::5e:45

🇳🇴 146.247.137.122