JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.168.250

106.75.168.250 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 63%: ?

63%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Hostname(s)	fpjjhzq.cn
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.168.250

Whois 106.75.168.250

IP Abuse Reports for 106.75.168.250:

This IP address has been reported a total of 16 times from 12 distinct sources. 106.75.168.250 was first reported on July 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-27 10:57:54 (1 hour ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): 2 in the last 3600 secs (0-196) show less	Hacking
🇨🇦 lakered	2026-07-27 02:55:28 (9 hours ago)	Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Evidence: High-Criminality-Signature ... show more Detectors: [NGINX] \| Reasons: Nginx: Default server trap hit \| Evidence: High-Criminality-Signature (p0f::64:0::mss*1,9:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.94), OS-Signature-Mismatch (UA:Windows/p0f:Linux) \| UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:13710m) show less	Port Scan Exploited Host
🇺🇸 NXTwoThou	2026-07-25 11:52:15 (2 days ago)	Subdomain exploit hunting	Port Scan
🇫🇷 masterguru	2026-07-24 11:32:26 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 FireGuard Server	2026-07-24 10:55:06 (3 days ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443	Port Scan Hacking
🇨🇦 1gz	2026-07-23 17:07:27 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-07-23 04:14:54 (4 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.250 (CN/China/fpjjhzq.cn): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 masterguru	2026-07-22 17:40:40 (4 days ago)	HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /conte ... show more HTTP header is restricted by policy (/accept-charset/). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. (920450-165) show less	Bad Web Bot
🇯🇵 HeliJP	2026-07-20 22:45:15 (6 days ago)	2026-07-20T22:08:47Z - Recognized attacks\bad behavior from IP address 106.75.168.250 on port 443\80 ... show more 2026-07-20T22:08:47Z - Recognized attacks\bad behavior from IP address 106.75.168.250 on port 443\80 (4 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇩🇪 Admins@FBN	2026-07-19 18:17:07 (1 week ago)	FW-PortScan: Traffic Blocked srcport=3446 dstport=80	Port Scan
🇦🇺 paulshipley.com.au	2026-07-14 23:25:55 (1 week ago)	[Wed Jul 15 09:25:54.519273 2026] [security2:error] [pid 303641] [client 106.75.168.250:52762] [clie ... show more [Wed Jul 15 09:25:54.519273 2026] [security2:error] [pid 303641] [client 106.75.168.250:52762] [client 106.75.168.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "albFghUgY_sx96ZUhtdnjAAAAAM"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-14 21:25:52 (1 week ago)	[Wed Jul 15 07:25:50.355092 2026] [security2:error] [pid 292538] [client 106.75.168.250:49564] [clie ... show more [Wed Jul 15 07:25:50.355092 2026] [security2:error] [pid 292538] [client 106.75.168.250:49564] [client 106.75.168.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "alapXjgKQDTyMwIlGSLAmwAAAAs"] ... show less	Web App Attack
🇺🇸 gerensat	2026-07-08 14:43:12 (2 weeks ago)	2026-07-08 11:43:12 \| / \| [] \| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) C ... show more 2026-07-08 11:43:12 \| / \| [] \| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Web App Attack
Anonymous	2026-07-05 18:32:04 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇺 Mga Admin	2026-07-04 01:36:59 (3 weeks ago)	[Sat Jul 04 08:36:58.494639 2026] [authz_core:error] [pid 2213308:tid 2213445] [client 106.75.168.25 ... show more [Sat Jul 04 08:36:58.494639 2026] [authz_core:error] [pid 2213308:tid 2213445] [client 106.75.168.250:1818] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 185.132.186.28

🇮🇪 52.164.217.9

🇲🇩 217.156.66.34

🇹🇼 198.235.24.41

🇮🇩 182.13.96.107

🇮🇹 172.213.216.126

🇮🇳 152.58.17.156

🇯🇵 152.32.201.217

🇮🇱 82.80.249.221

🇲🇾 47.250.38.64

🇳🇱 45.142.193.144

🇺🇸 206.204.22.110

🇸🇮 176.65.134.3

🇵🇱 176.53.159.198

🇺🇸 167.71.179.26

🇯🇵 124.155.125.131

🇺🇦 94.154.200.173

🇳🇱 93.174.95.106

🇧🇬 93.152.212.45

🇫🇷 91.231.89.80