JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

107.189.6.246

Neutral Activity

Abuse confidence score ?

0% Low Risk

120 reports

50 reporters · latest 11 months ago

ISP	BuyVM
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	maintain.voksfashions.com
Domain Name	frantech.ca
Country	🇨🇭 Switzerland
City	Bern, Bern

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

107.189.6.246 has been reported 120 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 107.189.6.246

This IP address has been reported a total of 120 times from 50 distinct sources. 107.189.6.246 was first reported on June 15th 2024, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2025-10-11 06:20:01 (11 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇮🇹 LTM	2025-02-17 07:20:01 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-30 09:02:59 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 107.189.6.246 (maintain.voksfashions.com): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 107.189.6.246 (maintain.voksfashions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 05:02:52.137380 2024] [security2:error] [pid 30233:tid 30233] [client 107.189.6.246:40638] [client 107.189.6.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.talkingvcardusa.com"] [uri "/.git/config"] [unique_id "ZtGKvNjWfnTv4UYOGhVoeAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-27 16:40:34 (2 years ago)	(mod_security) mod_security (id:232920) triggered by 107.189.6.246 (maintain.voksfashions.com): 1 in ... show more (mod_security) mod_security (id:232920) triggered by 107.189.6.246 (maintain.voksfashions.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 27 12:40:28.461256 2024] [security2:error] [pid 2045007:tid 2046102] [client 107.189.6.246:55712] [client 107.189.6.246] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/admin-post.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6482"] [id "232920"] [rev "1"] [msg "COMODO WAF: RFI vulnerability in social warfare plugin before 3.5.3 for WordPress(CVE-2019-9978)\|\|munatseng.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "munatseng.org"] [uri "/wp-admin/admin-post.php"] [unique_id "Zs4BfNVlvFXZ_WoRZKA9tQAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 oncord	2024-08-21 02:20:25 (2 years ago)	Form spam	Web Spam
🇮🇹 LTM	2024-08-16 06:20:01 (2 years ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 hbrks	2024-08-14 12:54:01 (2 years ago)	GET http://marche-be.com/wp-login.php	Web Spam Hacking Bad Web Bot
Anonymous	2024-08-12 10:27:55 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Psycho Solutions LLC	2024-08-10 16:28:37 (2 years ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 8/10/2024 11:28 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇹 LTM	2024-08-09 06:20:01 (2 years ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇫🇷 Kenshin869	2024-08-08 09:58:45 (2 years ago)	Wordpress unauthorized access attempt	Brute-Force
🇸🇬 oncord	2024-08-08 00:25:41 (2 years ago)	Form spam	Web Spam
🇩🇪 stinpriza	2024-08-04 12:14:25 (2 years ago)	Drupal Authentication failure	Brute-Force Web App Attack
🇺🇸 rsiddall	2024-08-02 16:36:28 (2 years ago)	107.189.6.246 - - [02/Aug/2024:12:36:27 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 ... show more 107.189.6.246 - - [02/Aug/2024:12:36:27 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134" 107.189.6.246 - - [02/Aug/2024:12:36:28 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134" ... show less	Brute-Force
🇩🇪 Dadelinux	2024-08-02 10:42:53 (2 years ago)	107.189.6.246 - - [02/Aug/2024:12:42:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5462 "-" "Mozilla/5.0 ... show more 107.189.6.246 - - [02/Aug/2024:12:42:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5462 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 107.189.6.246 - - [02/Aug/2024:12:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5462 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 107.189.6.246 - - [02/Aug/2024:12:42:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5462 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" show less	SQL Injection Web App Attack

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.152

🇫🇷 104.165.90.249

🇺🇸 97.163.227.181

🇷🇴 80.94.92.55

🇬🇧 78.153.140.40

🇺🇸 72.215.46.109

🇬🇧 45.133.173.149

🇨🇳 218.7.195.130

🇬🇧 178.62.32.109

🇹🇼 114.34.106.146

🇨🇳 111.123.182.30

🇧🇩 103.60.204.105

🇩🇪 91.92.240.33

🇵🇱 84.40.219.123

🇺🇸 23.254.128.152

🇺🇸 18.214.178.209

🇫🇷 2a13:f40:e034:aea9:8a0b:459f:a3be:14e7

🇲🇽 189.194.140.170

🇮🇳 152.58.59.168

🇺🇸 147.185.132.184