JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.129.102

106.75.129.102 was found in our database!

This IP was reported 227 times. Confidence of Abuse is 55%: ?

55%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.129.102

Whois 106.75.129.102

IP Abuse Reports for 106.75.129.102:

This IP address has been reported a total of 227 times from 55 distinct sources. 106.75.129.102 was first reported on November 23rd 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-08 02:25:53 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-09-07 10:18:29 (1 week ago)	Web application attack detected.	Web App Attack
🇮🇩 David Koswari	2026-09-07 07:10:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 Epimetheus	2026-09-07 02:38:24 (1 week ago)	Unauthorized access attempts: [GET] / UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, ... show more Unauthorized access attempts: [GET] / UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-09-06 12:33:35 (1 week ago)	[Sun Sep 06 22:33:34.913310 2026] [security2:error] [pid 932601] [client 106.75.129.102:30240] [clie ... show more [Sun Sep 06 22:33:34.913310 2026] [security2:error] [pid 932601] [client 106.75.129.102:30240] [client 106.75.129.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/"] [unique_id "ap1dntRpzqjoHf9gxDZ5MwAAAA0"] ... show less	Web App Attack
🇫🇷 masterguru	2026-09-06 04:25:51 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-09-06 04:00:23 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 NXTwoThou	2026-09-05 11:51:54 (2 weeks ago)	imap1	Web App Attack
🇺🇸 chronos	2026-09-04 23:38:45 (2 weeks ago)	[AUTORAVALT][[04/09/2026 - 20:38:44 -03:00 UTC] Attack from [Jinhui Jia] [106.75.129.102]-[RANGE:106 ... show more [AUTORAVALT][[04/09/2026 - 20:38:44 -03:00 UTC] Attack from [Jinhui Jia] [106.75.129.102]-[RANGE:106.75.0.0 - 106.75.255.255] [;; communications error to 127.0.0.53#53: timed out] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or othe] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇦🇺 Bay13	2026-09-04 15:00:34 (2 weeks ago)	CrowdSec:custom/http-probing	Web App Attack
🇫🇮 mnazibo	2026-09-04 09:30:22 (2 weeks ago)	Date: Sep 04 12:24:50 2026 EAT \| Reported IP: 106.75.129.102 mod_security \| id: 953100 959100 \| CN/u ... show more Date: Sep 04 12:24:50 2026 EAT \| Reported IP: 106.75.129.102 mod_security \| id: 953100 959100 \| CN/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-09-04 01:39:21 (2 weeks ago)	[Fri Sep 04 11:39:20.782428 2026] [security2:error] [pid 564960] [client 106.75.129.102:12046] [clie ... show more [Fri Sep 04 11:39:20.782428 2026] [security2:error] [pid 564960] [client 106.75.129.102:12046] [client 106.75.129.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "furst.com.au"] [uri "/"] [unique_id "apohSCClXPwdGonJq4xAtAAAAAo"] ... show less	Web App Attack
🇫🇷 masterguru	2026-09-03 15:57:41 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.129.102 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-08-29 12:39:20 (3 weeks ago)	Port scan on closed ports	Port Scan
🇫🇷 ACE-INFORMATIQUE.NC	2026-08-26 19:00:11 (3 weeks ago)	Brute-Force + SSH blocked by Fail2ban	Brute-Force SSH

Showing 1 to 15 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.220.59

🇳🇱 195.178.110.108

🇯🇵 172.105.196.91

🇺🇸 147.90.234.15

🇨🇳 81.68.238.92

🇱🇹 62.60.130.242

🇳🇱 45.148.10.141

🇷🇴 2.57.122.150

🇦🇷 200.89.159.59

🇳🇱 195.178.110.26

🇺🇦 195.26.18.112

192.168.178.64

🇮🇩 157.15.67.253

🇧🇬 109.160.32.107

🇺🇸 74.7.227.39

🇭🇰 47.76.227.166

🇭🇰 43.161.251.162

🇨🇳 36.103.243.179

🇨🇳 2409:8a00:3207:2028:d51a:6d5c:98f:2f0f

🇲🇽 201.119.94.201