JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.133.148

106.75.133.148 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 0%: ?

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Hostname(s)	yozhou.cn hrtnpxl.cn mail.doulangkeji.com qmcru.fun
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.133.148

Whois 106.75.133.148

IP Abuse Reports for 106.75.133.148:

This IP address has been reported a total of 150 times from 48 distinct sources. 106.75.133.148 was first reported on December 16th 2020, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-01-05 10:16:44 (6 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.133.148 (CN/China/mail.doulang ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.133.148 (CN/China/mail.doulangkeji.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇭🇺 HoneyPotEu	2026-01-05 09:13:01 (6 months ago)	106.75.133.148 [redacted]:443 (58466-CHINANET Guangdong province network China -) - - [05/Jan/2026:1 ... show more 106.75.133.148 [redacted]:443 (58466-CHINANET Guangdong province network China -) - - [05/Jan/2026:10:12:51 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-01-01 12:24:20 (6 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.133.148 (CN/China/yozhou.cn): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.133.148 (CN/China/yozhou.cn): 1 in the last 3600 secs (0-196) show less	Hacking
🇷🇺 6o6ep	2025-12-20 12:50:58 (7 months ago)	connection via IP or to a non-existent subdomain: GET / HTTP/1.1	Port Scan Hacking
🇭🇺 HoneyPotEu	2025-12-18 07:38:09 (7 months ago)	106.75.133.148 [redacted]:443 (58466-CHINANET Guangdong province network China -) - - [18/Dec/2025:0 ... show more 106.75.133.148 [redacted]:443 (58466-CHINANET Guangdong province network China -) - - [18/Dec/2025:08:38:07 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML ... show less	Bad Web Bot Web App Attack
🇳🇱 Silly Development	2025-12-02 07:19:44 (7 months ago)	2025-12-02T07:19:42.106510+00:00 omega.nodes.sillydev.co.uk wings[1970665]: 2025/12/02 07:19:42 http ... show more 2025-12-02T07:19:42.106510+00:00 omega.nodes.sillydev.co.uk wings[1970665]: 2025/12/02 07:19:42 http: TLS handshake error from 106.75.133.148:32596: read tcp 5.181.134.65:8080->106.75.133.148:32596: read: connection reset by peer 2025-12-02T07:19:42.589284+00:00 omega.nodes.sillydev.co.uk wings[1970665]: 2025/12/02 07:19:42 http: TLS handshake error from 106.75.133.148:32598: read tcp 5.181.134.65:8080->106.75.133.148:32598: read: connection reset by peer 2025-12-02T07:19:43.059080+00:00 omega.nodes.sillydev.co.uk wings[1970665]: 2025/12/02 07:19:43 http: TLS handshake error from 106.75.133.148:32602: read tcp 5.181.134.65:8080->106.75.133.148:32602: read: connection reset by peer 2025-12-02T07:19:43.318470+00:00 omega.nodes.sillydev.co.uk wings[1970665]: 2025/12/02 07:19:43 http: TLS handshake error from 106.75.133.148:32604: tls: client requested unsupported application protocols ([http/0.9 http/1.0 spdy/1 spdy/2 spdy/3 h2c hq]) 2025-12-02T07:19:43.822015+00:00 omega.nodes.sillydev.c ... show less	DDoS Attack
🇫🇷 GabrielJST	2025-11-30 14:19:48 (7 months ago)	Port Scan detected from 106.75.133.148 (CN/China/yozhou.cn).	Port Scan
🇺🇸 aks4226	2025-11-27 17:36:26 (7 months ago)	Attacking common web applications. (n01)	Web App Attack
🇨🇳 ThreatBook.io	2025-11-25 23:15:38 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-11-25 14:18:58 / 2025-11-25 14:18:59 /assets/webpack/main.b5cfaf04.chunk.js 2025-11-25 14:18:58 /assets/favicon-7901bd695fb93edb07975966062049829afb56cf11511236e61bcf425070e36e.png 2025-11-25 14:18:59 /assets/webpack/pages.sessions.new.fbc60106.chunk.js 2025-11-25 14:18:25 / 2025-11-25 14:18:59 /assets/webpack/commons~pages.ldap.omniauth_callbacks~pages.omniauth_callbacks~pages.sessions~pages.sessions.new.357ab81b.chunk.js 2025-11-25 14:18:59 /assets/webpack/runtime.7c7b62b1.bundle.js show less	Web App Attack
🇱🇹 Evag Touf	2025-11-23 08:25:17 (8 months ago)	(mod_security) mod_security triggered on hostname [redacted] 106.75.133.148 (CN/China/-)	SQL Injection
🇺🇸 Silly Development	2025-11-10 01:39:54 (8 months ago)	2025-11-10T01:39:52.441334+00:00 sigmanode wings[18640]: 2025/11/10 01:39:52 http: TLS handshake err ... show more 2025-11-10T01:39:52.441334+00:00 sigmanode wings[18640]: 2025/11/10 01:39:52 http: TLS handshake error from 106.75.133.148:30988: read tcp 45.139.50.12:8080->106.75.133.148:30988: read: connection reset by peer 2025-11-10T01:39:52.901066+00:00 sigmanode wings[18640]: 2025/11/10 01:39:52 http: TLS handshake error from 106.75.133.148:30990: read tcp 45.139.50.12:8080->106.75.133.148:30990: read: connection reset by peer 2025-11-10T01:39:53.351067+00:00 sigmanode wings[18640]: 2025/11/10 01:39:53 http: TLS handshake error from 106.75.133.148:30992: read tcp 45.139.50.12:8080->106.75.133.148:30992: read: connection reset by peer 2025-11-10T01:39:53.574946+00:00 sigmanode wings[18640]: 2025/11/10 01:39:53 http: TLS handshake error from 106.75.133.148:30994: tls: client requested unsupported application protocols ([http/0.9 http/1.0 spdy/1 spdy/2 spdy/3 h2c hq]) 2025-11-10T01:39:54.024271+00:00 sigmanode wings[18640]: 2025/11/10 01:39:54 http: TLS handshake error from 106.75.133.148:30996: t ... show less	DDoS Attack
Anonymous	2025-11-09 00:08:08 (8 months ago)	...	Bad Web Bot
🇨🇳 ThreatBook.io	2025-11-04 23:05:07 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-11- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-11-04 15:09:17 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-31 22:57:55 (8 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-10- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/106.75.133.148 2025-10-31 03:47:43 /favicon.ico 2025-10-31 05:17:38 / show less	Web App Attack
🇺🇸 xmission.com	2025-10-29 00:39:21 (8 months ago)	Blocked by UFW (TCP on 443) Source port: 25548 TTL: 44 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 25548 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 106.75.133.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::28

🇺🇸 162.216.150.40

🇩🇪 69.5.169.16

🇨🇳 58.222.86.210

🇳🇱 45.148.10.152

🇨🇷 177.93.0.118

🇺🇸 147.185.132.70

🇺🇸 137.184.139.220

🇨🇦 51.161.8.211

🇮🇳 49.37.43.148

🇺🇸 20.168.6.241

🇺🇸 20.84.58.231

🇬🇧 2.57.17.185

🇺🇸 2607:f8b0:4004:c1f::124

🇶🇦 2600:1900:4260:40e::121

🇺🇸 161.35.3.45

🇿🇦 154.16.95.92

🇫🇮 147.185.133.12

🇧🇷 138.97.214.201

🇨🇳 116.179.32.239