JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.66.25

106.75.66.25 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 47%: ?

47%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS4808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.66.25

Whois 106.75.66.25

IP Abuse Reports for 106.75.66.25:

This IP address has been reported a total of 124 times from 33 distinct sources. 106.75.66.25 was first reported on April 23rd 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-07 04:16:21 (3 days ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇳🇿 Antinson	2026-06-03 00:09:32 (1 week ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇪🇸 masterguru	2026-05-31 13:24:12 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇸 masterguru	2026-05-30 05:54:38 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
🇲🇽 octageeks.com	2026-05-30 04:09:56 (1 week ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇬🇧 PeravixGroup	2026-05-28 17:01:04 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇫🇷 Jimbo67	2026-05-26 08:31:23 (2 weeks ago)	Cloudflare WAF: 8 hits in 300s \| actions: ['block'] \| URIs: /, /, /robots.txt, /favicon.ico, /favico ... show more Cloudflare WAF: 8 hits in 300s \| actions: ['block'] \| URIs: /, /, /robots.txt, /favicon.ico, /favicon.ico show less	Web App Attack Bad Web Bot
🇬🇧 PeravixGroup	2026-05-22 20:46:43 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇦 dispensight	2026-05-21 01:17:11 (2 weeks ago)	Automated recon scan (Go/curl): 3 requests to help.dispensight.cloud. Paths: /favicon.ico, /robots.t ... show more Automated recon scan (Go/curl): 3 requests to help.dispensight.cloud. Paths: /favicon.ico, /robots.txt, /sitemap.xml. UA: Go-http-client/1.1. UCLOUD (Yangpu, China). show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-05-20 23:25:29 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-20 20:11:16 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇫🇮 payincog	2026-05-20 06:03:24 (3 weeks ago)	Date: 20/May/2026:08:15:58.190185 +0300 \| Reported IP: 106.75.66.25 mod_security \| id: 920350 920440 ... show more Date: 20/May/2026:08:15:58.190185 +0300 \| Reported IP: 106.75.66.25 mod_security \| id: 920350 920440 930130 949110 \| CN/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; show less	SQL Injection Brute-Force Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-16 22:28:02 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.66.25 202 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.66.25 2026-05-16 13:38:36 / 2026-05-16 12:54:07 /favicon.ico 2026-05-16 12:54:08 /sitemap.xml 2026-05-16 13:38:37 /favicon.ico 2026-05-16 12:54:08 /robots.txt 2026-05-16 12:54:07 / 2026-05-16 13:03:24 /robots.txt 2026-05-16 13:03:24 /sitemap.xml 2026-05-16 13:03:24 /favicon.ico 2026-05-16 13:03:24 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-15 22:31:02 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.66.25 202 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.66.25 2026-05-15 20:45:59 / 2026-05-15 20:46:00 /robots.txt 2026-05-15 12:46:20 / 2026-05-15 12:46:20 /favicon.ico 2026-05-15 12:46:21 /sitemap.xml 2026-05-15 12:46:21 /robots.txt show less	Web App Attack
🇩🇪 ghostwarriors	2026-05-15 06:20:06 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:24ff:43::

🇨🇳 223.247.46.126

🇩🇪 213.209.159.56

🇮🇳 183.83.169.74

🇨🇳 101.249.63.99

🇧🇬 91.191.209.46

🇳🇱 45.148.10.141

🇬🇧 197.155.92.35

🇺🇸 136.109.10.98

🇮🇳 103.91.246.101

🇳🇱 45.142.193.185

🇨🇴 200.41.113.82

🇭🇰 199.45.154.180

🇨🇳 117.81.212.152

🇺🇸 107.172.80.207

🇺🇸 103.251.27.175

🇮🇳 103.148.121.101

🇨🇳 101.76.248.214

🇸🇾 94.47.13.24

🇺🇸 66.132.224.15