Severe Risk
IP address 106.75.137.178 is a critical-risk address linked to sustained hacking activity, originating from CHINANET's Guangdong province network in China. With a threat level of 10 out of 10 and 917 total abuse reports, this IP represents one of the most persistently malicious addresses currently active. Its 88% confidence score indicates high certainty that the observed behavior is deliberate and hostile rather than misconfigured traffic or legitimate scanning.
Automated honeypot sensors recorded this IP's activity spanning approximately nine months, from September 2025 through June 2026, with an activity frequency rated 8 out of 10. All 20 of the most recent reports categorise the threat exclusively as hacking, confirming a focused campaign of intrusion attempts rather than opportunistic noise. The address operates within AS58466, part of CHINANET's extensive Chinese telecommunications infrastructure, which is frequently associated with high-volume scanning and exploitation activity due to the sheer scale of the network.
The hacking classification encompasses broad intrusion activity, including vulnerability probing, exploitation attempts, and unauthorized access campaigns. An IP with this volume of reports operating at maximum threat intensity poses a significant risk to any exposed service, particularly those with weak authentication, outdated software, or known exploitable configurations. Attackers leveraging such addresses typically conduct automated sweeps to identify and compromise vulnerable targets at scale, often selling access or deploying further payloads upon initial success.
Site operators should immediately block or rate-limit connections from this address at the firewall level and implement strict access controls on exposed services. Deploying intrusion detection systems and reviewing authentication logs for attempts originating from this IP will help identify any successful compromise. Keeping all software patched, enforcing strong unique credentials, and using tools such as fail2ban to dynamically block repeated offenders significantly reduces the attack surface. Continuous monitoring of abuse feeds and threat intelligence platforms will ensure timely defensive action against similar high-risk addresses.
RO 
GB 
BG