JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.67.101

106.75.67.101 was found in our database!

This IP was reported 656 times. Confidence of Abuse is 30%: ?

30%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS4808
Hostname(s)	mail.ppmgbtlifcynitmp.com
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.67.101

Whois 106.75.67.101

IP Abuse Reports for 106.75.67.101:

This IP address has been reported a total of 656 times from 206 distinct sources. 106.75.67.101 was first reported on May 21st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-13 04:20:19 (1 day ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
Anonymous	2026-06-09 14:20:55 (4 days ago)	(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.67. ... show more (apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 106.75.67.101 (CN/China/mail.ppmgbtlifcynitmp.com): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 106.75.67.101 - - [09/Jun/2026:16:20:39 +0200] "GET /favicon.ico HTTP/1.1" 301 512 "-" "Go-http-client/1.1" 106.75.67.101 - - [09/Jun/2026:16:20:41 +0200] "GET /favicon.ico HTTP/1.1" 302 3790 "http://www.wowsmoothies.nl/favicon.ico" "Go-http-client/1.1" 106.75.67.101 - - [09/Jun/2026:16:20:48 +0200] "GET /wp-content/uploads/2016/10/cropped-WOW_Logo-5-3-32x32.png HTTP/1.1" 200 4541 "https://www.wowsmoothies.nl/favicon.ico" "Go-http-client/1.1" 106.75.67.101 - - [09/Jun/2026:16:20:49 +0200] "GET /sitemap.xml HTTP/1.1" 301 512 "-" "Go-http-client/1.1" 106.75.67.101 - - [09/Jun/2026:16:20:51 +0200] "GET /robots.txt HTTP/1.1" 301 510 "-" "Go-http-client/1.1" show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-16 00:41:46 (4 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 2026-05-15 00:33:49 /Portainer_files/matomo.js 2026-05-15 00:33:51 /Portainer_files/main.css 2026-05-15 00:33:49 /Portainer_files/29d4ee6d4a5c786588a7.svg 2026-05-15 00:33:49 /Portainer_files/main.js 2026-05-15 00:33:49 /Portainer_files/vendor.css 2026-05-15 00:33:46 / 2026-05-15 00:33:49 /Portainer_files/runtime.js 2026-05-15 00:33:49 / 2026-05-15 00:33:49 /Portainer_files/main.css 2026-05-15 00:33:49 /Portainer_files/vendor.js show less	Web App Attack
🇺🇸 mnsf	2026-05-13 20:05:41 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇪🇸 masterguru	2026-05-12 11:03:35 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-11 00:36:19 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-04-24 00:26:05 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 2026-04-23 13:42:03 /login/robots.txt 2026-04-23 13:42:05 /login 2026-04-23 13:42:05 /login 2026-04-23 13:42:03 /favicon.ico 2026-04-23 13:42:03 / 2026-04-23 13:42:05 /images/logo.png 2026-04-23 13:42:05 / 2026-04-23 13:42:05 /js/jquery.min.js 2026-04-23 13:42:03 /login/sitemap.xml 2026-04-23 13:42:05 /css/login.min.css show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-19 00:29:41 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 2026-04-18 00:32:49 / show less	Web App Attack
🇺🇸 chronos	2026-04-16 04:23:58 (1 month ago)	[AUTORAVALT][[16/04/2026 - 01:23:58 -03:00 UTC] Attack from [Jinhui Jia] [106.75.67.101]-[RANGE:106. ... show more [AUTORAVALT][[16/04/2026 - 01:23:58 -03:00 UTC] Attack from [Jinhui Jia] [106.75.67.101]-[RANGE:106.75.0.0 - 106.75.255.255] [mail.ppmgbtlifcynitmp.com] Action: BLocKed Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing. ] ... show less	Bad Web Bot
🇺🇸 masterguru	2026-04-13 13:04:03 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-147) show less	Bad Web Bot
🇲🇾 Rizzy	2026-04-05 18:12:30 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-04 01:29:53 (2 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.67.101 2026-04-03 19:17:32 / show less	Web App Attack
🇬🇧 kiwi.network	2026-04-01 22:46:45 (2 months ago)	Web application fingerprinting: Binary file (standard input) matches	Hacking Web App Attack Exploited Host
🇵🇱 sefinek.net	2026-04-01 21:15:23 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/562.53 (KHTML, like Gecko) Chrome/59.0.1124 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 kumiko	2026-03-26 01:29:57 (2 months ago)	[2026-03-26 03:29:55] Probing for exploits [1 requests] "\x16\x03\x01\x01\r\x01" 301	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 656 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.223.114

🇮🇳 111.125.242.51

🇳🇱 2a13:adc0::2db:cfff:fe2b:2b8a

🇶🇦 2600:1900:4260:40e::2d

🇮🇳 182.78.151.252

🇫🇮 147.185.133.113

🇨🇳 144.123.77.64

🇷🇴 141.98.83.48

🇺🇸 130.12.140.12

🇰🇷 113.130.212.9

🇻🇳 103.153.254.96

🇻🇳 103.153.254.9

🇺🇸 82.39.109.68

🇨🇳 60.8.73.174

🇸🇬 43.156.61.33

🇰🇷 1.235.192.214

🇧🇷 189.17.134.242

🇮🇩 180.178.94.218

🇮🇳 122.187.229.168

🇨🇳 119.41.147.77