JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.8.136.85

106.8.136.85 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 27%: ?

27%

ISP	CHINANET hebei province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Zhangjiakou, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.8.136.85

Whois 106.8.136.85

IP Abuse Reports for 106.8.136.85:

This IP address has been reported a total of 76 times from 13 distinct sources. 106.8.136.85 was first reported on December 5th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 00:02:08 (22 hours ago)	(mod_security) mod_security (id:210730) triggered by 106.8.136.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 106.8.136.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 20:02:03.176334 2026] [security2:error] [pid 25594:tid 25594] [client 106.8.136.85:58853] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ai3ve0MyUKq-s-kctTFgXwAAAAI"], referer: https://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-05-15 01:10:03 (4 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 ghostwarriors	2026-05-13 23:50:14 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-05-13 23:42:04 (1 month ago)	2026/05/14 01:42:02 [error] 87497#223122: 1267121 limiting requests, excess: 0.992 by zone "crawler ... show more 2026/05/14 01:42:02 [error] 87497#223122: 1267121 limiting requests, excess: 0.992 by zone "crawler", client: 106.8.136.85, server: git.ksol.io, request: "GET /karolyi?tab=activity HTTP/1.1", host: "git.ksol.io" ... show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-12 01:19:27 (1 month ago)	ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 ... show more ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 2026-05-11 11:36:41 /js/jiucuo.js show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-22 01:43:04 (1 month ago)	ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 ... show more ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 2026-04-21 06:24:11 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Faqts%2F202604%2Ft20260407_1466033.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Cache-Control":["no-cache"],"Connection":["close"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"Pragma":["no-cache"],"Referer":["http://nxjj.nxnews.net/"],"User-Agent":["YisouSpider"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"106.8.136.85:43985","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"YisouSpider"} show less	Web App Attack
🇦🇺 MAGIC	2026-04-19 00:41:03 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 rh24	2026-04-02 14:42:34 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/Chi ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/China/-) show less	Bad Web Bot
🇩🇪 rh24	2026-03-21 08:22:09 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/Chi ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/China/-) show less	Bad Web Bot
🇮🇹 Progetto1	2026-03-02 21:30:04 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 00:24:10 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 106.8.136.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 106.8.136.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 19:24:03.943331 2026] [security2:error] [pid 25839:tid 25839] [client 106.8.136.85:41981] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aZepowYgy1iejRbSc388XwAAAAs"], referer: http://civilwarzone.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-30 02:58:58 (4 months ago)	ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 ... show more ThreatBook Intelligence: gameserver,vpn_proxy more details on https://threatbook.io/ip/106.8.136.85 2026-01-29 17:38:07 /dfdfd show less	Web App Attack
🇨🇦 Mediashaker	2026-01-22 05:33:15 (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/Chi ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 106.8.136.85 (CN/China/-) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-01-06 00:51:22 (5 months ago)	ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/106.8.136.85 202 ... show more ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/106.8.136.85 2026-01-05 11:40:15 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-20 01:22:48 (5 months ago)	ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/106.8.136.85 202 ... show more ThreatBook Intelligence: gameserver,Zombie more details on https://threatbook.io/ip/106.8.136.85 2025-12-19 10:29:05 /dfdfd show less	Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.13

🇵🇰 103.186.114.73

🇨🇳 117.69.235.183

🇪🇬 105.183.30.206

🇺🇸 98.82.40.168

🇷🇺 46.191.163.43

🇧🇷 34.95.165.121

🇦🇺 20.11.1.197

🇰🇷 210.222.46.15

🇹🇼 198.235.24.71

🇧🇷 187.120.104.231

🇬🇧 185.127.69.164

🇱🇹 185.36.81.23

🇯🇵 172.253.80.217

🇺🇸 147.185.132.237

🇻🇳 103.121.91.144

🇸🇪 74.241.131.208

🇳🇱 45.148.10.151

🇳🇱 204.76.203.15

🇧🇷 177.66.83.149