JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.189.12.88

107.189.12.88 was found in our database!

This IP was reported 530 times. Confidence of Abuse is 0%: ?

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.189.12.88

Whois 107.189.12.88

IP Abuse Reports for 107.189.12.88:

This IP address has been reported a total of 530 times from 146 distinct sources. 107.189.12.88 was first reported on November 24th 2021, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-09-17 12:18:13 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (11 months ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-30 00:33:56 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 20:33:50.754853 2025] [security2:error] [pid 22462:tid 22462] [client 107.189.12.88:38650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.joshi.us"] [uri "/.git/config"] [unique_id "aIlobpT3ga4z_Gy2NxVOJgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 20:57:41 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 27 16:57:33.696661 2025] [security2:error] [pid 20646:tid 20646] [client 107.189.12.88:33918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.samanthasomers.com"] [uri "/.git/config"] [unique_id "aIaSvVbKfIv0xYQh_3kEsQAAAHQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-09 16:05:24 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from T1. ASN: 53667 (PONYNET) Protocol: HTTP/2 (GET method) UA: Mo ... show more Triggered Cloudflare WAF (l7ddos) from T1. ASN: 53667 (PONYNET) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-01 21:03:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 17:03:22.071914 2025] [security2:error] [pid 8868:tid 8868] [client 107.189.12.88:55480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jacksonconstructiongroup.com"] [uri "/.git/config"] [unique_id "aGRNGopwY8KEJm3c0lnDrgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-01 02:49:50 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 22:49:43.297609 2025] [security2:error] [pid 23553:tid 23553] [client 107.189.12.88:36822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sammour.com"] [uri "/.git/config"] [unique_id "aGNMx4pVYvL3wdbComqRvQAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 12:46:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 08:46:14.037191 2025] [security2:error] [pid 30456:tid 30456] [client 107.189.12.88:34094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.myhomeflyer.com"] [uri "/.git/config"] [unique_id "aGKHFn6PObi7kJeVENsSqgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-29 23:46:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 19:45:58.306576 2025] [security2:error] [pid 789542:tid 789542] [client 107.189.12.88:48078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seeingblue.com"] [uri "/.git/config"] [unique_id "aGHQNqu0up5xN6ufbnpn1wAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-06-23 08:42:47 (1 year ago)	06/23/2025-10:37:48.789652 107.189.12.88 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 5	Hacking
🇬🇧 Aetherweb Ark	2025-06-21 22:20:42 (1 year ago)	(mod_security) mod_security (id:949110) triggered by 107.189.12.88 (DE/Germany/-): N in the last X s ... show more (mod_security) mod_security (id:949110) triggered by 107.189.12.88 (DE/Germany/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-06-20 19:00:08 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 15:00:02.636146 2025] [security2:error] [pid 2779995:tid 2779995] [client 107.189.12.88:56014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozonators.mroxygen.org"] [uri "/.git/config"] [unique_id "aFWvspMlbfbCuvzKbKznzAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-06-20 10:24:08 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 oncord	2025-06-20 06:38:40 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-06-19 07:55:08 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 107.189.12.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 19 03:55:01.277975 2025] [security2:error] [pid 3906730:tid 3906730] [client 107.189.12.88:59572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daprototype.desertalfas.org"] [uri "/.git/config"] [unique_id "aFPCVfWVlm53v57vTCGGDQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 530 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 105.224.33.128

🇧🇪 34.78.163.151

🇺🇸 2602:80d:1007::c9

🇦🇷 181.116.220.251

🇧🇷 177.190.200.122

🇹🇭 171.100.67.250

🇫🇷 167.86.66.42

🇻🇳 113.188.86.9

🇧🇬 91.92.47.90

🇧🇬 79.124.56.242

🇫🇷 62.210.142.160

🇴🇲 37.40.239.97

🇧🇪 34.34.175.117

🇳🇱 34.12.170.91

🇿🇦 4.221.162.168

🇩🇪 217.253.116.190

🇫🇷 217.128.120.43

🇺🇸 205.210.31.44

🇧🇷 201.89.20.223

🇺🇸 172.245.11.105