JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.64.250

106.75.64.250 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 40%: ?

40%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS9808
Hostname(s)	mail.huijingzhiye.com
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.64.250

Whois 106.75.64.250

IP Abuse Reports for 106.75.64.250:

This IP address has been reported a total of 180 times from 49 distinct sources. 106.75.64.250 was first reported on April 20th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-20 01:57:03 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-07-14 22:54:21 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.64. ... show more (apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.64.250 (CN/China/mail.huijingzhiye.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 106.75.64.250 - - [15/Jul/2026:00:54:13 +0200] "GET /wp-content/uploads/2021/04/fav.svg HTTP/1.1" 200 7927 "-" "Go-http-client/1.1" 106.75.64.250 - - [15/Jul/2026:00:54:14 +0200] "GET /wp-content/plugins/weglot/dist/front-js.js?ver=3.6.1 HTTP/1.1" 200 1110 "-" "Go-http-client/1.1" 106.75.64.250 - - [15/Jul/2026:00:54:15 +0200] "GET /wp-content/plugins/paypal-for-woocommerce/assets/js/angelleye-frontend.js?ver=7.5.2 HTTP/1.1" 200 1161 "-" "Go-http-client/1.1" 106.75.64.250 - - [15/Jul/2026:00:54:15 +0200] "GET /robots.txt HTTP/1.1" 200 322 "-" "Go-http-client/1.1" 106.75.64.250 - - [15/Jul/2026:00:54:15 +0200] "GET /sitemap.xml HTTP/1.1" 302 321 "-" "Go-http-client/1.1" show less	Port Scan
🇺🇸 omc	2026-07-05 12:22:19 (2 weeks ago)	Unauthorized file [PP]	Bad Web Bot
🇵🇱 sefinek.net	2026-07-03 18:18:20 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 8_1_1; Win64; x64) AppleWebKit/559.52 (KHTML, like Gecko) Chrome/73.0.2671 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-03 00:35:11 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.64. ... show more (apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.64.250 (CN/China/mail.huijingzhiye.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 106.75.64.250 - - [03/Jul/2026:02:35:06 +0200] "GET /favicon.ico HTTP/1.1" 301 512 "-" "Go-http-client/1.1" 106.75.64.250 - - [03/Jul/2026:02:35:07 +0200] "GET /favicon.ico HTTP/1.1" 302 3790 "http://www.wowsmoothies.nl/favicon.ico" "Go-http-client/1.1" 106.75.64.250 - - [03/Jul/2026:02:35:09 +0200] "GET /wp-content/uploads/2016/10/cropped-WOW_Logo-5-3-32x32.png HTTP/1.1" 200 4541 "https://www.wowsmoothies.nl/favicon.ico" "Go-http-client/1.1" 106.75.64.250 - - [03/Jul/2026:02:35:09 +0200] "GET /robots.txt HTTP/1.1" 301 510 "-" "Go-http-client/1.1" 106.75.64.250 - - [03/Jul/2026:02:35:09 +0200] "GET /sitemap.xml HTTP/1.1" 301 512 "-" "Go-http-client/1.1" show less	Port Scan
🇵🇱 sefinek.net	2026-06-26 21:20:49 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 8_2_1) AppleWebKit/580.46 (KHTML, like Gecko) Chrome/52.0.2105 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-06-21 23:17:27 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇨🇦 dispensight	2026-06-21 08:41:20 (1 month ago)	ngrok traffic to help.dispensight.cloud: 3 req(s) [GET]. URIs: /favicon.ico, /robots.txt, /sitemap.x ... show more ngrok traffic to help.dispensight.cloud: 3 req(s) [GET]. URIs: /favicon.ico, /robots.txt, /sitemap.xml. UA: Go-http-client/1.1. ISP: UCLOUD. Flag: automated discovery recon (robots+favicon+sitemap). show less	Port Scan Bad Web Bot
🇬🇧 pinguin	2026-06-13 15:53:44 (1 month ago)	Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from CN. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 8_2_1) AppleWebKit/598.43 (KHTML, like Gecko) Chrome/83.0.2476 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 LSPCCU	2026-06-12 03:03:54 (1 month ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Br ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP 106. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇧🇷 ICS Labs	2026-06-10 18:04:41 (1 month ago)	ICS Labs identified 106.75.64.250 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇬🇧 PeravixGroup	2026-06-06 15:51:57 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇦🇺 Anytech	2026-06-06 10:21:13 (1 month ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇺🇸 oralunal	2026-06-05 01:41:52 (1 month ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-04 13:06:13 (1 month ago)	Abuse Detected (38)	Brute-Force Web App Attack

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9441:3af::5e:7a

🇨🇦 85.217.149.32

🇺🇸 216.218.206.97

🇺🇸 216.25.89.100

🇺🇸 209.38.155.24

🇹🇭 202.29.220.126

🇸🇬 194.195.90.91

🇺🇸 173.225.102.23

🇺🇸 162.217.100.36

🇭🇰 152.32.189.59

🇺🇸 66.132.186.214

🇯🇵 40.74.68.248

🇬🇧 35.203.210.62

🇺🇸 216.218.206.90

🇧🇷 186.232.110.92

🇹🇭 182.52.149.151

🇳🇱 167.172.35.12

🇺🇸 165.1.64.191

🇺🇸 134.199.230.13

🇨🇦 85.217.149.57