Critical Alert
Security alert: 106.75.214.209 rated 10/10 based on 5 verified incidents.
Threat profile indicates sustained malicious activity with 72% confidence rating.
More threatening than 93% of monitored IPs
IP Address
106.75.214.209
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
China
Location
China Unicom Shanghai net...
ASN 17621
5
Reports
Honeypot
Data Source
Threat Categories
SSH
3
Hacking
3
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
16. May 2026
Last Activity
26. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 17621) with generally good reputation. The ISP China Unicom Shanghai network maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
67%
High Confidence
Confidence History
5. May 2026 - 26. May 2026
72%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 106.75.214.209
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS17621
- ISP
- China Unicom Shanghai network
DNS Information
- Reverse DNS
- foqbqey.cn
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 5 May 2026
- Last Reported
- 26 May 2026, 18:18
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS17621
China Unicom Shanghai network
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
205
Total IPs Monitored
712
Total Reports
3.5
Reports per IP
Network Context
This IP address belongs to China Unicom Shanghai network (AS17621), which manages 205 IP addresses in our monitoring system. Out of these, 712 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,492 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
5
avg: 23
--
Network Comparison
Compared against 216 IPs in ASN 17621
Threat Level
10/10
network avg: 3.9
++
Total Reports
5
network avg: 4
+
Network China Unicom Shanghai network has overall threat level 3/10
Geographic Comparison
Compared against 26,021 IPs in CN
Threat Level
10/10
country avg: 3.7
++
Total Reports
5
country avg: 6
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
16 May 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Saturday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
3
SSH
3
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9%
-
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
70%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
113.31.107.103
10/10
Confidence
98%
Reports
20
Location
CN
CN
58.247.139.54
10/10
Confidence
95%
Reports
31
Location
CN
CN
140.206.99.42
8/10
Confidence
93%
Reports
39
Location
CN
CN
113.31.103.129
10/10
Confidence
91%
Reports
55
Location
CN
CN
106.75.222.164
10/10
Confidence
90%
Reports
16
Location
CN
CN
27.115.19.14
10/10
Confidence
86%
Reports
43
Location
CN
CN
106.75.231.80
10/10
Confidence
84%
Reports
12
Location
CN
CN
139.227.13.154
8/10
Confidence
70%
Reports
11
Location
CN
CN
223.167.75.86
7/10
Confidence
66%
Reports
6
Location
CN
CN
106.75.239.166
8/10
Confidence
65%
Reports
11
Location
CN
CN
140.206.83.106
8/10
Confidence
62%
Reports
11
Location
CN
CN
106.75.224.96
10/10
Confidence
61%
Reports
7
Location
CN
CN
139.227.161.73
10/10
Confidence
60%
Reports
15
Location
CN
CN
112.65.49.151
8/10
Confidence
59%
Reports
3
Location
CN
CN
106.75.222.86
10/10
Confidence
57%
Reports
6
Location
CN
CN
140.207.15.4
7/10
Confidence
56%
Reports
5
Location
CN
CN
223.166.22.191
10/10
Confidence
54%
Reports
7
Location
CN
CN
223.166.22.176
10/10
Confidence
53%
Reports
5
Location
CN
CN
223.166.22.62
10/10
Confidence
51%
Reports
4
Location
CN
CN
106.75.230.113
10/10
Confidence
50%
Reports
6
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
218.90.157.62
10/10
Confidence
100%
Reports
59
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
72%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
187.108.1.130
8/10
Confidence
72%
Reports
4,633
Location
BR
BR
49.64.242.249
10/10
Confidence
72%
Reports
2,977
Location
CN
CN
92.63.197.55
8/10
Confidence
72%
Reports
2,582
Location
UA
UA
179.51.153.37
10/10
Confidence
72%
Reports
2,285
Location
BR
BR
198.235.24.42
10/10
Confidence
72%
Reports
1,054
Location
US
US
103.183.75.90
10/10
Confidence
72%
Reports
829
Location
ID
ID
147.185.133.104
10/10
Confidence
72%
Reports
750
Location
US
US
78.153.140.43
10/10
Confidence
72%
Reports
622
Location
GB
GB
45.144.212.136
7/10
Confidence
72%
Reports
604
Location
UA
UA
85.215.119.240
8/10
Confidence
72%
Reports
589
Location
DE
DE
45.79.181.104
10/10
Confidence
72%
Reports
576
Location
US
US
118.193.65.234
10/10
Confidence
72%
Reports
551
Location
GB
GB
118.193.58.187
10/10
Confidence
72%
Reports
483
Location
DE
DE
173.239.240.145
10/10
Confidence
72%
Reports
467
Location
US
US
130.12.180.55
10/10
Confidence
72%
Reports
463
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203