JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.189.31.248

107.189.31.248 was found in our database!

This IP was reported 6,652 times. Confidence of Abuse is 0%: ?

ISP	BuyVM
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	torexitrouter
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.189.31.248

Whois 107.189.31.248

IP Abuse Reports for 107.189.31.248:

This IP address has been reported a total of 6,652 times from 450 distinct sources. 107.189.31.248 was first reported on February 13th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2024-11-21 20:53:13 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-11-20 20:53:13 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2024-11-20 15:36:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 10:36:22.610696 2024] [security2:error] [pid 5314:tid 5314] [client 107.189.31.248:36364] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lovelinked.com"] [uri "/.git/config"] [unique_id "Zz4B9gR_cm_tYiJJcROI4QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-20 13:37:36 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 08:37:30.685501 2024] [security2:error] [pid 12492:tid 12492] [client 107.189.31.248:36196] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.waleed.co.waleed-alshalan.com"] [uri "/.git/config"] [unique_id "Zz3mGlYt0DbEbv-vxNKW5AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 10:49:58 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 05:49:55.427645 2024] [security2:error] [pid 1917309:tid 1917309] [client 107.189.31.248:46506] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|biblemathprojects.com\|F\|2"] [data ".mathsquad.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "biblemathprojects.com"] [uri "/Http:/www.mathsquad.com"] [unique_id "Zzsb096nFbXlHjx_R-2G_gAAAA0"], referer: http://biblemathprojects.com/Http://www.mathsquad.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyuuzyou	2024-11-16 17:17:48 (1 year ago)	Intensive scraping: /web?s=%22Gallery%202.0%22%20%22Add%20Comment%22&country=mt-mt&scraper=brave. Us ... show more Intensive scraping: /web?s=%22Gallery%202.0%22%20%22Add%20Comment%22&country=mt-mt&scraper=brave. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36. show less	Bad Web Bot
🇦🇺 oncord	2024-11-14 08:09:38 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2024-11-13 12:45:38 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 07:45:31.063642 2024] [security2:error] [pid 21040:tid 21040] [client 107.189.31.248:44038] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "parastesh.org"] [uri "/wp-config.old.old"] [unique_id "ZzSfa0L_jxOmPMU5WNt1ogAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-13 04:38:55 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 23:38:50.894506 2024] [security2:error] [pid 9410:tid 9410] [client 107.189.31.248:59864] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.icbsmonitor.net"] [uri "/.git/config"] [unique_id "ZzQtWuJpO6RBt8IcXjf-pQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-12 21:32:31 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 16:32:26.311193 2024] [security2:error] [pid 11004:tid 11004] [client 107.189.31.248:44746] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.joqlawn.com"] [uri "/.git/config"] [unique_id "ZzPJai9GbTqVZdSrYHqFGgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 oncord	2024-11-12 18:56:48 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2024-11-12 03:09:36 (1 year ago)	(mod_security) mod_security (id:243930) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:243930) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 22:09:31.856219 2024] [security2:error] [pid 28193:tid 28193] [client 107.189.31.248:33506] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|www.michellerosekennedy.com:80\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.michellerosekennedy.com"] [uri "/"] [unique_id "ZzLG66eFyAdw3WX6FxIBwAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-11 19:10:10 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 14:10:03.451612 2024] [security2:error] [pid 20229:tid 20229] [client 107.189.31.248:56912] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thai-tam.com"] [uri "/.git/config"] [unique_id "ZzJWi8x8J6QTWaXkVz5OoAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-11 13:20:22 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 107.189.31.248 (torexitrouter): 1 in the last 3 ... show more (mod_security) mod_security (id:210730) triggered by 107.189.31.248 (torexitrouter): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 08:20:17.202844 2024] [security2:error] [pid 9306:tid 9306] [client 107.189.31.248:36878] [client 107.189.31.248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|7bsuperfruit.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "7bsuperfruit.com"] [uri "/wp.sql"] [unique_id "ZzIEkQQj5D23WtjaACM7JAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyuuzyou	2024-11-10 10:56:56 (1 year ago)	Intensive scraping: /web?s=populartags.php%20%22Popular%20tags%22&scraper=wiby. User-Agent: Mozilla/ ... show more Intensive scraping: /web?s=populartags.php%20%22Popular%20tags%22&scraper=wiby. User-Agent: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot

Showing 1 to 15 of 6652 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.108.184.96

🇯🇵 172.105.199.92

🇸🇪 157.22.75.114

🇹🇭 118.194.251.75

🇳🇱 45.148.10.157

🇨🇳 36.139.229.71

🇹🇼 35.236.146.58

🇺🇸 2607:f8b0:4001:c18::127

🇬🇧 213.166.84.55

🇷🇺 185.94.111.1

🇩🇪 77.83.39.47

🇱🇹 62.60.130.242

🇳🇱 34.90.7.236

🇪🇹 196.189.155.89

🇮🇳 154.221.35.72

🇨🇳 123.245.98.118

🇨🇳 111.14.105.62

🇩🇪 43.228.157.10

🇺🇸 34.122.254.237

🇳🇱 195.178.110.218