JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.168.39

106.75.168.39 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 49%: ?

49%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.168.39

Whois 106.75.168.39

IP Abuse Reports for 106.75.168.39:

This IP address has been reported a total of 12 times from 9 distinct sources. 106.75.168.39 was first reported on July 4th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-26 15:04:53 (8 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 Gabriel Camargo	2026-07-25 21:08:23 (1 day ago)	106.75.168.39 - - [25/Jul/2026:16:08:16 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT ... show more 106.75.168.39 - - [25/Jul/2026:16:08:16 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.168.39 - - [25/Jul/2026:16:08:20 -0500] "GET /js/flickity.pkgd.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 106.75.168.39 - - [25/Jul/2026:16:08:23 -0500] "GET /js/bootstrap.min.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Brute-Force SSH
🇺🇸 NXTwoThou	2026-07-25 11:34:56 (1 day ago)	Subdomain exploit hunting	Port Scan
🇺🇸 NetVexor	2026-07-24 18:14:27 (2 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇫🇷 masterguru	2026-07-23 16:02:11 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-07-23 01:12:31 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.168.39 (CN/China/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇫🇮 mnazibo	2026-07-22 07:00:19 (4 days ago)	Date: Jul 22 09:51:51 2026 EAT \| Reported IP: 106.75.168.39 mod_security \| id: 953100 959100 \| CN/us ... show more Date: Jul 22 09:51:51 2026 EAT \| Reported IP: 106.75.168.39 mod_security \| id: 953100 959100 \| CN/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4) show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 cwytech	2026-07-22 03:58:36 (4 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-07-14 23:25:51 (1 week ago)	[Wed Jul 15 09:25:49.874732 2026] [security2:error] [pid 286360] [client 106.75.168.39:44340] [clien ... show more [Wed Jul 15 09:25:49.874732 2026] [security2:error] [pid 286360] [client 106.75.168.39:44340] [client 106.75.168.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/"] [unique_id "albFfQs-6gpj_LzJlCU5fgAAAAY"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-14 21:25:51 (1 week ago)	[Wed Jul 15 07:25:50.215626 2026] [security2:error] [pid 292809] [client 106.75.168.39:18494] [clien ... show more [Wed Jul 15 07:25:50.215626 2026] [security2:error] [pid 292809] [client 106.75.168.39:18494] [client 106.75.168.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "alapXpE8ZyWPH2rUGqevXwAAABE"] ... show less	Web App Attack
🇺🇸 xmission.com	2026-07-05 11:01:02 (3 weeks ago)	Blocked by UFW (TCP on 80) Source port: 21544 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 21544 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 106.75.168.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇷🇺 Mga Admin	2026-07-04 06:56:10 (3 weeks ago)	106.75.168.39 - - [04/Jul/2026:13:56:10 +0700] "GET /users/sign_in HTTP/1.1" 403 199 "-" "Mozilla/5. ... show more 106.75.168.39 - - [04/Jul/2026:13:56:10 +0700] "GET /users/sign_in HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 51.68.151.167

🇳🇱 45.148.10.141

🇨🇳 42.81.126.27

🇰🇷 1.214.214.114

🇵🇾 186.16.59.246

🇦🇲 91.231.202.108

🇩🇪 213.209.159.227

🇺🇸 198.98.53.213

🇨🇴 181.129.41.162

🇲🇾 172.197.168.125

🇮🇳 103.208.231.173

🇹🇷 94.154.43.56

🇷🇺 81.211.72.167

🇲🇾 47.250.159.245

🇳🇱 45.148.10.147

🇮🇳 34.14.169.119

🇺🇸 20.127.245.101

🇷🇴 2.57.121.25

🇩🇪 194.187.176.212

🇩🇪 139.59.208.49