JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.52.171.40

106.52.171.40 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 74%: ?

74%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.52.171.40

Whois 106.52.171.40

IP Abuse Reports for 106.52.171.40:

This IP address has been reported a total of 126 times from 24 distinct sources. 106.52.171.40 was first reported on April 24th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-07-26 01:02:46 (6 hours ago)	CrowdSec ban for crowdsecurity/netgear-router-bruteforce	Brute-Force Web App Attack
Anonymous	2026-07-25 20:56:33 (10 hours ago)	[25/Jul/2026:23:56:26 +0300] 17850129868.016979 106.52.171.40 49414 148.251.76.218 80 [25/Jul/2026:2 ... show more [25/Jul/2026:23:56:26 +0300] 17850129868.016979 106.52.171.40 49414 148.251.76.218 80 [25/Jul/2026:23:56:32 +0300] 17850129922.134799 106.52.171.40 55243 148.251.76.218 443 show less	Web App Attack
🇩🇪 4server	2026-07-25 14:13:17 (17 hours ago)	[SatJul2516:13:13.7376582026][security2:error][pid115447:tid115516][client106.52.171.40:0]ModSecurit ... show more [SatJul2516:13:13.7376582026][security2:error][pid115447:tid115516][client106.52.171.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"parrocchiaditesserete.ch\"][uri\"/\"][unique_id\"amTEeSGfW2Tpqaw08D-5GAAAAIg\"]\,referer:https://m.baidu.com/s\?word=www.fzj3w.cn show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-25 09:25:59 (22 hours ago)	FortiWeb WAF: 34 attacks detected. Threat Score: 9000. Types: Client Management(17), GEO IP(17). Ori ... show more FortiWeb WAF: 34 attacks detected. Threat Score: 9000. Types: Client Management(17), GEO IP(17). Origin: China. show less	Web App Attack
Anonymous	2026-07-25 05:41:00 (1 day ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇨🇭 4server	2026-07-25 03:39:04 (1 day ago)	[SatJul2505:39:00.5008332026][security2:error][pid2123392:tid2123434][client106.52.171.40:0]ModSecur ... show more [SatJul2505:39:00.5008332026][security2:error][pid2123392:tid2123434][client106.52.171.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"r102.ch\"][uri\"/\"][unique_id\"amQv1BsCQG666dRRNq9wdQAAAFU\"]\,referer:https://m.baidu.com/s\?word=www.ksr4k.cn show less	Hacking Web App Attack
🇩🇪 4server	2026-07-24 16:24:33 (1 day ago)	[FriJul2418:24:27.7200912026][security2:error][pid3364279:tid3364376][client106.52.171.40:0]ModSecur ... show more [FriJul2418:24:27.7200912026][security2:error][pid3364279:tid3364376][client106.52.171.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"noleggi.ch\"][uri\"/\"][unique_id\"amORu3CNi7VqcE1SAcl1WAAAAUo\"]\,referer:https://m.baidu.com/s\?word=www.jnqye.cn show less	Port Scan Brute-Force Web App Attack
🇦🇺 Bay13	2026-07-24 11:57:37 (1 day ago)	CrowdSec:custom/http-probing	Web App Attack
🇳🇱 Site.eu	2026-07-24 07:36:14 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 4server	2026-07-24 06:52:13 (2 days ago)	[FriJul2408:52:10.6766412026][security2:error][pid2298322:tid2298551][client106.52.171.40:0]ModSecur ... show more [FriJul2408:52:10.6766412026][security2:error][pid2298322:tid2298551][client106.52.171.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aid-web.ch\"][uri\"/\"][unique_id\"amMLmu7lv0atmUAhxpjpjwAAAUQ\"]\,referer:https://m.baidu.com/s\?word=www.fzj3w.cn show less	Hacking Web App Attack
🇩🇪 4server	2026-07-24 00:48:52 (2 days ago)	[FriJul2402:48:47.1239892026][security2:error][pid2218447:tid2218529][client106.52.171.40:0]ModSecur ... show more [FriJul2402:48:47.1239892026][security2:error][pid2218447:tid2218529][client106.52.171.40:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"galardi.ch\"][uri\"/\"][unique_id\"amK2b1L-2FlIs319aE9h9wAAAJU\"]\,referer:https://m.baidu.com/s\?word=www.jdbp.cn show less	Port Scan Brute-Force Web App Attack
🇬🇧 andypiper	2026-07-24 00:05:50 (2 days ago)	CrowdSec ban for crowdsecurity/netgear-router-bruteforce	Brute-Force Web App Attack
🇨🇦 1gz	2026-07-23 16:16:04 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 26_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-23 09:28:37 (2 days ago)	FortiWeb WAF: 30 attacks detected. Threat Score: 8400. Types: Client Management(15), GEO IP(15). Ori ... show more FortiWeb WAF: 30 attacks detected. Threat Score: 8400. Types: Client Management(15), GEO IP(15). Origin: China. show less	Web App Attack
🇳🇱 Site.eu	2026-07-23 00:47:06 (3 days ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.105.124.30

🇩🇪 167.94.145.22

🇺🇦 81.163.126.226

🇹🇷 81.8.9.18

🇦🇺 27.124.111.122

🇨🇳 220.197.85.128

🇧🇷 181.224.86.114

🇫🇮 147.185.133.166

🇰🇪 102.210.148.41

🇺🇸 72.211.57.196

🇺🇸 66.132.172.121

🇺🇸 64.62.156.174

🇳🇴 51.120.79.193

🇳🇱 45.148.10.147

🇵🇰 39.34.140.126

🇨🇳 219.153.103.109

🇺🇸 207.90.244.19

🇳🇱 195.178.110.217

🇫🇷 146.70.194.254

🇫🇷 85.217.140.46