JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.139.54

106.75.139.54 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 51%: ?

51%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.139.54

Whois 106.75.139.54

IP Abuse Reports for 106.75.139.54:

This IP address has been reported a total of 25 times from 16 distinct sources. 106.75.139.54 was first reported on July 5th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-03 13:55:12 (10 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-09-03 13:24:17 (11 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 NetVexor	2026-09-03 12:00:39 (12 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇭🇷 bubausluge	2026-09-03 08:24:59 (16 hours ago)	Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-03 ... show more Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-03 08:03:53 to 2026-09-03 08:03:53 show less	Web App Attack Hacking
🇮🇪 Coolnagour	2026-09-03 07:32:48 (17 hours ago)	httpprobe: banned during check /	Web App Attack
🇳🇱 tr1n	2026-08-23 09:27:15 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| ASN: 58466 (CHINANET ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| ASN: 58466 (CHINANET Guangdong province network) \| Protocol: HTTP/2 (GET) \| Endpoint: / \| Timestamp: 2026-08-23T09:27:15Z \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Bad Web Bot
🇺🇸 NXTwoThou	2026-08-20 21:00:13 (2 weeks ago)	174.78	Web App Attack
🇦🇺 Bay13	2026-08-12 20:46:10 (3 weeks ago)	CrowdSec:custom/modsecurity	Web App Attack
🇵🇱 Budyn	2026-08-02 06:06:43 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.xyz \| URI: / \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-08-02 00:12:47 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.top \| URI: / \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇺 Bay13	2026-07-31 03:45:50 (1 month ago)	CrowdSec:custom/modsecurity	Web App Attack
🇫🇷 masterguru	2026-07-30 07:18:48 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.139.54 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇵🇱 Budyn	2026-07-30 05:54:11 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.goblinpot.site \| URI: / \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 Dorian GRANDHAY	2026-07-29 01:03:00 (1 month ago)	(PERMBLOCK) 106.75.139.54 (CN/China/-) has had more than 4 temp blocks in the last 604800 secs; Port ... show more (PERMBLOCK) 106.75.139.54 (CN/China/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-07-28 15:22:23 (1 month ago)	Try to connect to Port_Scan_80_stealth	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.178

🇳🇱 188.166.105.111

🇺🇸 162.216.149.181

🇺🇸 162.142.84.30

🇺🇸 135.119.92.229

🇻🇳 103.28.38.135

🇮🇱 82.102.158.36

🇧🇷 45.233.159.23

🇬🇧 35.203.211.14

🇻🇳 14.182.209.123

🇨🇦 4.204.224.164

🇺🇸 3.208.159.201

🇩🇪 3.75.100.144

🇷🇴 2.57.122.53

🇺🇸 207.90.244.17

🇳🇱 204.76.203.213

🇺🇸 156.40.214.144

🇺🇸 95.173.217.67

🇳🇱 93.123.109.228

🇫🇷 91.196.152.127