JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.189.13.180

107.189.13.180 was found in our database!

This IP was reported 2,715 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.189.13.180

Whois 107.189.13.180

IP Abuse Reports for 107.189.13.180:

This IP address has been reported a total of 2,715 times from 715 distinct sources. 107.189.13.180 was first reported on October 21st 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-06-27 03:46:05 (2 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: dpc8dvxsgy3qp.cloudfront.net:80 show less	Open Proxy Port Scan
🇮🇩 securejdprop	2026-06-26 15:35:56 (15 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 5). Ip 107.189.13.180 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-26 15:35:55.349266846 +0000 UTC show less	Hacking Web App Attack
🇮🇩 securejdprop	2026-06-25 08:16:43 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 5). Ip 107.189.13.180 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-25 08:16:42.197786129 +0000 UTC show less	Hacking Web App Attack
🇸🇬 securejdprop	2026-06-25 08:00:29 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 5). Ip 107.189.13.180 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-25 08:00:28.049654891 +0000 UTC show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-24 18:13:11 (2 days ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇩🇪 big-cloud.nl	2026-06-24 08:18:21 (2 days ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇵🇱 MP.tv	2026-06-24 05:11:16 (3 days ago)	2026-06-24T07:11:15.396183+02:00 transfer-srv sshd[4188017]: Invalid user admin from 107.189.13.180 ... show more 2026-06-24T07:11:15.396183+02:00 transfer-srv sshd[4188017]: Invalid user admin from 107.189.13.180 port 37082 2026-06-24T07:11:14.739169+02:00 transfer-srv sshd[4188019]: Connection from 107.189.13.180 port 37052 on 192.168.1.201 port 22 rdomain "" 2026-06-24T07:11:15.434364+02:00 transfer-srv sshd ... show less	Brute-Force SSH
🇪🇸 librebit	2026-06-23 09:56:56 (3 days ago)	Brute force	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-23 07:17:04 (3 days ago)	107.189.13.180 - - [23/Jun/2026:09:17:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Mozilla/5. ... show more 107.189.13.180 - - [23/Jun/2026:09:17:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 107.189.13.180 - - [23/Jun/2026:09:17:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 107.189.13.180 - - [23/Jun/2026:09:17:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-22 19:12:57 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇮🇩 securejdprop	2026-06-22 14:22:14 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 5). Ip 107.189.13.180 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-22 14:22:13.374254404 +0000 UTC show less	Hacking Web App Attack
🇮🇩 securejdprop	2026-06-21 18:16:42 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 5). Ip 107.189.13.180 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-21 18:16:41.16071727 +0000 UTC show less	Hacking Web App Attack
🇸🇬 pusathosting.com	2026-06-20 00:03:06 (1 week ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-19 20:45:03 (1 week ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob.fr	2026-06-19 20:15:04 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 2715 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.213.238.91

🇺🇸 64.62.197.70

🇺🇸 3.239.128.125

🇺🇸 172.253.214.29

🇨🇳 101.89.141.184

🇷🇴 92.118.39.77

🇳🇱 89.21.67.183

🇫🇷 85.217.140.42

🇫🇷 85.217.140.38

🇮🇷 85.198.19.251

🇺🇸 47.251.76.211

🇨🇳 27.204.185.20

🇺🇸 205.210.31.54

🇧🇷 200.164.181.6

🇬🇧 193.176.29.3

🇳🇱 176.65.139.94

🇺🇸 162.216.149.206

🇫🇮 147.185.133.25

🇧🇷 138.97.243.78

🇮🇳 124.108.19.186