JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.150.96.189

107.150.96.189 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 70%: ?

70%

ISP	UCLOUD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.150.96.189

Whois 107.150.96.189

IP Abuse Reports for 107.150.96.189:

This IP address has been reported a total of 50 times from 34 distinct sources. 107.150.96.189 was first reported on April 29th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-06-18 16:43:16 (1 week ago)	Port scan to tcp/1900 from 107.150.96.189	Brute-Force
🇩🇪 HoneyPotFRI	2026-06-17 16:51:42 (1 week ago)	107.150.96.189 - - [17/Jun/2026:18:51:26 +0200] "x16x03x01x05xC4x01x00x05xC0x03x03~A?x0C!#xFABxE1a-x ... show more 107.150.96.189 - - [17/Jun/2026:18:51:26 +0200] "x16x03x01x05xC4x01x00x05xC0x03x03~A?x0C!#xFABxE1a-xAEkWxBCxB6p xC4{x072xC4&xACxF3x0Cx85x1CxC0xEExA9 x12xA2zx10*jxD7^xD ... show less	Bad Web Bot Web App Attack
🇫🇷 pm33	2026-06-17 12:02:35 (1 week ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
🇺🇸 kosada.com	2026-06-14 23:31:46 (1 week ago)	Web vulnerability probing (bogus request)	Web App Attack
🇺🇸 LotPhantom	2026-06-14 10:20:15 (2 weeks ago)	2026-06-14T10:20:02.397488+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-14T10:20:02.397488+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=107.150.96.189 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=58500 DF PROTO=TCP SPT=44808 DPT=8080 WINDOW=64952 RES=0x00 SYN URGP=0 2026-06-14T10:20:15.570794+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=107.150.96.189 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=5711 DF PROTO=TCP SPT=39198 DPT=8080 WINDOW=64952 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 kuj	2026-06-14 09:06:18 (2 weeks ago)	2026-06-14T03:06:12.761219-06:00 derp derper[226735]: 2026/06/14 03:06:12 http: TLS handshake error ... show more 2026-06-14T03:06:12.761219-06:00 derp derper[226735]: 2026/06/14 03:06:12 http: TLS handshake error from 107.150.96.189:59974: acme/autocert: missing server name 2026-06-14T03:06:16.068177-06:00 derp derper[226735]: 2026/06/14 03:06:16 http: TLS handshake error from 107.150.96.189:59976: acme/autocert: missing server name 2026-06-14T03:06:17.399951-06:00 derp derper[226735]: 2026/06/14 03:06:17 http: TLS handshake error from 107.150.96.189:59980: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇸🇬 anotherwatcher	2026-06-14 02:11:54 (2 weeks ago)	bad bot	Bad Web Bot
Anonymous	2026-06-13 16:09:30 (2 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25 Accept-Encoding: gzip; 8181 [6] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 diego	2026-06-13 03:20:20 (2 weeks ago)	[probe-44-49] 2026-06-13 03:00:57, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-13 03:00:57, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇳🇱 BIV	2026-06-12 17:34:10 (2 weeks ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:P0f,tpot:Suricata. Ports: 8080. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇧🇷 diego	2026-06-12 02:05:20 (2 weeks ago)	[probe-44-49] 2026-06-12 01:46:10, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-12 01:46:10, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇵🇱 webadmin	2026-06-11 13:57:03 (2 weeks ago)		Web App Attack
🇧🇷 diego	2026-06-11 04:08:07 (2 weeks ago)	[arem1] 2026-06-11 03:48:34, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTTP: GET ... show more [arem1] 2026-06-11 03:48:34, Client: 107.150.96.189, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 dpsbs	2026-06-10 19:17:20 (2 weeks ago)	url scanning on multiple public ips detected	Bad Web Bot
Anonymous	2026-06-06 18:42:29 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ... show more Honeypot hit: HTTP/1.1 request on 8181 GET / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/601.6.17 (KHTML, like Gecko) Version/9.1.1 Safari/601.6.17 Accept-Encoding: gzip; 8181 [14] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.15.55.133

🇫🇷 172.71.119.9

🇻🇳 171.244.39.95

🇫🇷 85.217.140.26

🇺🇦 79.143.45.75

🇬🇧 35.203.210.87

🇺🇸 24.170.232.141

🇻🇳 14.225.7.70

🇮🇳 209.38.120.71

🇩🇪 172.217.34.30

🇦🇪 92.98.255.26

🇳🇱 91.92.40.10

🇧🇷 45.140.193.156

🇦🇷 190.50.115.82

🇧🇷 187.84.244.57

🇺🇸 135.237.127.54

🇨🇳 120.48.42.17

🇮🇩 103.145.68.97

🇩🇪 91.92.240.157

🇺🇸 66.132.195.20