JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

106.75.137.149

Recent Activity

Abuse confidence score ?

76% Critical

55 reports

30 reporters · latest 22 hours ago

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 106.75.137.149

Export CSV

This IP address has been reported a total of 55 times from 30 distinct sources. 106.75.137.149 was first reported on July 4th 2026, and the most recent report was 22 hours ago. In the last 60 days, the top reporter locations were: France with 10 reports; Germany with 7 reports; United States of America with 5 reports. The most common categories in these recent reports were: Web App Attack 12 times; Hacking 11 times; Bad Web Bot 10 times; Port Scan 5 times; Brute-Force 4 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-14 01:02:58 (22 hours ago)	GET / \| rule: automated-client-blocked \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, ... show more GET / \| rule: automated-client-blocked \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| net: Shanghai UCloud Information Technology Company Limited AS58466 show less	Bad Web Bot
Anonymous	2026-10-12 23:47:05 (2 days ago)	GET / \| rule: automated-client-blocked \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, ... show more GET / \| rule: automated-client-blocked \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-11 09:25:38 (3 days ago)	FortiWeb WAF: 6 attacks detected. Threat Score: 5000. Types: Client Management(3), GEO IP(3). Origin ... show more FortiWeb WAF: 6 attacks detected. Threat Score: 5000. Types: Client Management(3), GEO IP(3). Origin: China. show less	Web App Attack
🇫🇷 Kraften	2026-10-11 03:20:29 (3 days ago)	GET Web noscript attack ...	Web Spam Web App Attack
🇫🇷 masterguru	2026-10-11 00:19:30 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-10-10 09:09:23 (4 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-10-09 15:53:04 (5 days ago)	Reported from Nginx log analysis 17. Log: 106.75.137.149 - - [09/Oct/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 17. Log: 106.75.137.149 - - [09/Oct/2026:xx:xx:xx 0200] "GET / HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" "-" "CN China -" "AS58466" "CHINANET Guangdong province network" show less	Port Scan Brute-Force SSH
🇩🇪 LRob	2026-10-09 14:22:06 (5 days ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| 2026-10-09 14:22 UTC show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-10-09 02:41:27 (5 days ago)	[Fri Oct 09 13:41:27.009555 2026] [security2:error] [pid 592276] [client 106.75.137.149:52536] [clie ... show more [Fri Oct 09 13:41:27.009555 2026] [security2:error] [pid 592276] [client 106.75.137.149:52536] [client 106.75.137.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "ashUVxV5yDkbflxLySyTSwAAAAY"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-10-08 20:34:53 (6 days ago)	[Fri Oct 09 07:34:52.555282 2026] [security2:error] [pid 565749] [client 106.75.137.149:59588] [clie ... show more [Fri Oct 09 07:34:52.555282 2026] [security2:error] [pid 565749] [client 106.75.137.149:59588] [client 106.75.137.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "asf-bOvFtWmP9SjfznAYTAAAAAc"] ... show less	Web App Attack
🇺🇸 Cyber Crusader	2026-10-08 15:45:50 (6 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇫🇷 masterguru	2026-10-08 09:55:51 (6 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-10-08 09:10:07 (6 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.137.149 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 Kejult	2026-10-08 06:32:28 (6 days ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 6 ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 6 source port(s). Sensor(s): Tanner. show less	Port Scan
Anonymous	2026-10-07 09:50:07 (1 week ago)	Web application attack detected.	Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 160.119.66.206

🇩🇪 159.65.112.174

🇨🇳 139.209.228.105

🇻🇳 116.110.211.16

🇻🇪 82.86.129.73

🇺🇸 66.132.195.59

🇷🇴 2.57.122.76

🇫🇮 213.232.122.215

🇬🇧 200.138.46.219

🇨🇴 190.108.79.125

🇨🇴 190.60.47.30

🇦🇷 186.122.89.157

🇧🇼 168.167.228.123

🇺🇸 167.99.98.129

🇺🇸 159.223.131.13

🇪🇸 158.179.208.77

🇯🇵 103.143.72.165

🇷🇺 85.175.72.188

🇺🇸 20.102.100.50

🇧🇷 190.89.55.250