JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.36.195

106.75.36.195 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 45%: ?

45%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS9808
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.36.195

Whois 106.75.36.195

IP Abuse Reports for 106.75.36.195:

This IP address has been reported a total of 131 times from 32 distinct sources. 106.75.36.195 was first reported on April 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-21 23:17:23 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.36.195 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 106.75.36.195 (CN/China/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 Anytech	2026-06-15 09:06:57 (1 week ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:45:28 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 106.75.36.195 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 106.75.36.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:45:20.129723 2026] [security2:error] [pid 12655:tid 12655] [client 106.75.36.195:58794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "ai1tAJ6eESGCKP5y57_uKgAAAAw"], referer: http://gamepart.com/home/tancedi1/gamepart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-04 13:06:05 (2 weeks ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-03 17:49:45 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇿🇦 Tokolosh Hunters	2026-06-01 18:06:44 (3 weeks ago)	AutoBlockWindow-Known bad useragent query-2026-06-01 18:06:43	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-01 06:21:27 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-05-29 13:08:10 (3 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇲🇾 Rizzy	2026-05-23 17:33:55 (4 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-05-20 21:11:56 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-18 22:49:37 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 2026-05-18 00:47:42 /sitemap.xml 2026-05-18 00:47:42 /robots.txt 2026-05-18 00:47:41 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-16 22:55:29 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 2026-05-16 13:22:43 / 2026-05-16 13:22:43 /guard.html/robots.txt 2026-05-16 12:57:48 /sitemap.xml 2026-05-16 12:57:48 /robots.txt 2026-05-16 13:04:31 / 2026-05-16 12:57:47 / 2026-05-16 13:22:43 /favicon.ico 2026-05-16 12:57:48 /favicon.ico 2026-05-16 13:22:43 /guard.html/sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 23:03:52 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 2026-05-12 09:10:06 /ui/favicons/favicon-32x32.png 2026-05-12 09:42:35 / 2026-05-12 09:42:35 /favicon.ico 2026-05-12 09:10:06 /sitemap.xml 2026-05-12 09:10:01 / 2026-05-12 09:10:06 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-05 23:31:55 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 20 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/106.75.36.195 2026-05-05 04:47:28 / 2026-05-05 11:41:20 / show less	Web App Attack
🇬🇧 consul.to	2026-05-03 19:56:08 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 200.10.29.235

🇺🇦 195.245.121.3

🇺🇸 172.200.228.35

🇺🇸 150.107.36.85

🇺🇸 35.171.228.136

🇺🇸 3.235.90.95

🇮🇳 182.95.106.78

🇷🇺 178.177.55.11

🇩🇪 167.94.145.24

🇵🇰 103.18.15.38

🇺🇸 98.92.179.12

🇷🇺 77.66.192.139

🇺🇸 69.164.217.74

🇺🇸 64.23.153.176

🇰🇪 41.191.229.226

🇺🇸 34.201.25.171

🇸🇦 5.41.68.96

🇧🇷 205.210.31.226

🇺🇸 195.184.76.35

🇺🇸 165.227.101.198