JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.141.7

106.75.141.7 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 37%: ?

37%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.141.7

Whois 106.75.141.7

IP Abuse Reports for 106.75.141.7:

This IP address has been reported a total of 11 times from 7 distinct sources. 106.75.141.7 was first reported on July 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-07-30 05:50:17 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.site \| URI: / \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-29 08:51:06 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-28 22:11:29 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 106.75.141.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 106.75.141.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 18:11:19.765929 2026] [security2:error] [pid 1473846:tid 1473846] [client 106.75.141.7:20086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "amkpB9vD2YlMJtVQsKJxLAAAABA"], referer: http://gamepart.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-27 21:15:20 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 2 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-07-26 09:03:20 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-07-23 16:23:16 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 2 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-07-23 03:44:11 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.141.7 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-07-16 01:35:51 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 paulshipley.com.au	2026-07-14 21:26:07 (2 weeks ago)	[Wed Jul 15 07:26:02.650264 2026] [security2:error] [pid 292888] [client 106.75.141.7:29474] [client ... show more [Wed Jul 15 07:26:02.650264 2026] [security2:error] [pid 292888] [client 106.75.141.7:29474] [client 106.75.141.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "alapat343xsm92NXAarScgAAAA4"] ... show less	Web App Attack
🇺🇸 xmission.com	2026-07-05 11:00:22 (3 weeks ago)	Blocked by UFW (TCP on 80) Source port: 2224 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 80) Source port: 2224 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 106.75.141.7) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-07-05 05:10:24 (3 weeks ago)	Blocked by firewall on hugin [11434/tcp] \| Rule: UFW \| SPT: 11646 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [11434/tcp] \| Rule: UFW \| SPT: 11646 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.65.194.167

🇺🇸 205.185.113.112

🇧🇷 201.68.37.92

🇲🇽 200.66.70.156

🇬🇧 193.176.29.21

🇧🇷 190.124.190.246

🇮🇩 182.11.155.164

🇺🇸 162.216.149.125

🇨🇳 124.117.194.173

🇨🇳 115.210.92.115

🇨🇳 112.86.225.192

🇳🇱 91.92.47.140

🇧🇬 79.124.49.226

🇺🇸 66.132.195.66

🇺🇸 64.62.156.153

🇹🇭 49.49.230.106

🇷🇺 31.25.29.163

🇺🇸 20.228.193.165

🇨🇦 20.220.203.117

🇷🇴 2.57.121.112