JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.189.1.198

107.189.1.198 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 0%: ?

ISP	BuyVM
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	torexitrouter
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.189.1.198

Whois 107.189.1.198

IP Abuse Reports for 107.189.1.198:

This IP address has been reported a total of 221 times from 88 distinct sources. 107.189.1.198 was first reported on August 25th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2025-10-11 06:20:01 (9 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
Anonymous	2025-02-24 18:50:02 (1 year ago)	apache vulnerability scan	Web App Attack
🇮🇹 LTM	2025-02-17 07:20:01 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
Anonymous	2025-01-13 15:40:26 (1 year ago)	apache vulnerability scan	Web App Attack
Anonymous	2024-12-21 17:03:27 (1 year ago)	apache vulnerability scan	Web App Attack
Anonymous	2024-12-18 21:36:27 (1 year ago)	apache vulnerability scan	Web App Attack
🇦🇺 oncord	2024-11-20 19:12:11 (1 year ago)	Form spam	Web Spam
🇫🇮 paissangroup	2024-11-20 04:19:12 (1 year ago)	Multiple WAF Violations	Web App Attack
Anonymous	2024-11-20 02:39:54 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-11-17 17:52:15 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 107.189.1.198 (torexitrouter): 1 in the last 30 ... show more (mod_security) mod_security (id:210730) triggered by 107.189.1.198 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 17 12:52:09.268056 2024] [security2:error] [pid 2486:tid 2486] [client 107.189.1.198:45286] [client 107.189.1.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digitview.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digitview.com"] [uri "/mailto:[email protected]"] [unique_id "ZzotSVUn-nFeOqO2fiYhLgAAABA"], referer: http://digitview.com/mailto:[email protected] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 PaulSep	2024-11-17 14:41:02 (1 year ago)	2024-11-17T15:41:01+01:00 [redacted] 107.189.1.198 - - [17/Nov/2024:15:41:00 +0100] "GET /tai-khoan ... show more 2024-11-17T15:41:01+01:00 [redacted] 107.189.1.198 - - [17/Nov/2024:15:41:00 +0100] "GET /tai-khoan/ HTTP/1.1" 302 52112 "https://[redacted]/wp-login.php?redirect_to=%2Fil-mio-account%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" show less	Hacking
🇩🇪 nyuuzyou	2024-11-15 12:10:47 (1 year ago)	Intensive scraping: /web?s=%22Your%20one-stop%20source%20for%20free%20articles.%20Do%20you%20need%20 ... show more Intensive scraping: /web?s=%22Your%20one-stop%20source%20for%20free%20articles.%20Do%20you%20need%20contents%20to%20add%20to%20your%20web%20site%3F%22&country=fa-fa&scraper=mojeek. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-14 20:06:55 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 14 15:06:50.191840 2024] [security2:error] [pid 2650472:tid 2650472] [client 107.189.1.198:37446] [client 107.189.1.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.broneksuchanek.com"] [uri "/.git/config"] [unique_id "ZzZYWp_EJoUCjJEDjA-etgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 00:08:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 19:08:03.756201 2024] [security2:error] [pid 11466:tid 11466] [client 107.189.1.198:34304] [client 107.189.1.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.microscopedia.com"] [uri "/.git/config"] [unique_id "ZzPt47gPGLyB1tw21ySXKgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 12:19:42 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 30 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.1.198 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 07:19:37.843489 2024] [security2:error] [pid 3435:tid 3435] [client 107.189.1.198:56402] [client 107.189.1.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziiafoundation.org"] [uri "/wp-config.old.old"] [unique_id "ZzNH2VhhB8FFmvQ9-dtSMAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 34.65.76.222

🇰🇪 197.155.74.94

🇩🇪 194.88.98.83

🇳🇱 185.136.15.77

🇺🇸 181.214.83.147

🇳🇱 176.65.148.125

🇩🇪 152.53.151.135

🇷🇺 109.194.108.203

🇧🇷 108.174.147.120

🇬🇧 89.37.172.146

🇺🇸 64.202.186.161

🇺🇸 52.188.224.110

🇳🇱 45.148.121.138

🇺🇸 165.154.163.107

🇳🇱 158.94.209.107

🇨🇳 123.131.17.131

🇨🇳 119.109.229.65

🇵🇰 101.50.83.146

🇸🇬 101.47.158.56

🇸🇬 47.84.143.108