JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.98.60.100

Recent Activity

Abuse Confidence Score

60% Elevated

20 reports

14 reporters · latest 2 days ago

ISP: FREGAT
Usage Type: Fixed Line ISP
ASN: AS15377
Domain Name: fregat.net
Country: 🇺🇦 Ukraine
City: Dnipro, Dnipropetrovsk

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 14 distinct reporters

First reported

September 30th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 4 🇺🇸 United States of America 4

Most common categories Web App Attack 13 Bad Web Bot 9 Brute-Force 7 Hacking 5 VPN IP 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-11 00:07:09 UTC · (2 days ago)	(mod_security) mod_security (id:225170) triggered by 46.98.60.100 (100.60.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:07:05.028928 2026] [security2:error] [pid 23156:tid 23156] [client 46 ... show more (mod_security) mod_security (id:225170) triggered by 46.98.60.100 (100.60.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:07:05.028928 2026] [security2:error] [pid 23156:tid 23156] [client 46.98.60.100:48282] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barkatthemoonpetsitting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barkatthemoonpetsitting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avOxqfTY74UtOfUvbsiI6AAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 bensmithurst	2026-11-10 23:48:08 UTC · (2 days ago)	46.98.60.100 - - [10/Nov/2026:23:47:41 +0000] "GET /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 46.98.60.100 - - [10/Nov/2026:23:48:07 +0000] "POST ... show more 46.98.60.100 - - [10/Nov/2026:23:47:41 +0000] "GET /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 46.98.60.100 - - [10/Nov/2026:23:48:07 +0000] "POST /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... [host=LAN***] show less	Bad Web Bot Web App Attack
Anonymous	2026-11-07 12:50:05 UTC · (5 days ago)	\| [Dangerous/Ukraine] Aggressive IP 46.98.60.100 (~30 hits). Type: DoS Defender- Web server 400 error code	Web App Attack Hacking SQL Injection
🇺🇸 lostswordfish.com	2026-11-04 16:44:03 UTC · (1 week ago)	Wordfence waf block on parsol	Web App Attack
🇵🇱 Budyn	2026-11-04 00:59:28 UTC · (1 week ago)	[Budyn Honeypot Sinkhole] \| Attack type: WP Path Scanning (Recon) \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: api.astropot.store \| Path: /xmlrpc.php \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ... show more [Budyn Honeypot Sinkhole] \| Attack type: WP Path Scanning (Recon) \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: api.astropot.store \| Path: /xmlrpc.php \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-11-03 02:07:15 UTC · (1 week ago)	Unauthorized VPN login attempts	Brute-Force
🇨🇿 Countryman	2026-10-31 01:10:01 UTC · (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 cwytech	2026-10-30 05:18:10 UTC · (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-30 01:48:10 UTC · (2 weeks ago)	Web exploit attempt \| method: GET \| path: / \| query: author=5&feed=rss2 \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| 2026-10-30 01:48 UTC	Hacking Web App Attack
🇩🇪 FD-IX	2026-10-27 21:53:43 UTC · (2 weeks ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-27 19:57:13 UTC · (2 weeks ago)	Not following 301 redirects — wasted requests \| host: terravox.fr \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Inte ... show more Not following 301 redirects — wasted requests \| host: terravox.fr \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 \| src_port: 55664 \| 2026-10-27 19:57 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-27 14:00:32 UTC · (2 weeks ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 \| 2026-10-27 14:00 UTC	Bad Web Bot
🇫🇷 LRob	2026-10-19 11:50:14 UTC · (3 weeks ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-17 11:56:06 UTC · (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 46.98.60.100 (100.60.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:56:02.541580 2026] [security2:error] [pid 3218:tid 3218] [client 46.9 ... show more (mod_security) mod_security (id:225170) triggered by 46.98.60.100 (100.60.PPPoE.fregat.ua): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:56:02.541580 2026] [security2:error] [pid 3218:tid 3218] [client 46.98.60.100:43666] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|prayers4america.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prayers4america.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atNiUvFs_WZYqEQOSkwRVwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-13 11:39:03 UTC · (4 weeks ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 46.98.60.100 (UA/Ukraine/100.60.PPPoE.fregat.ua): 1 in the last 3600 secs (0-195)	Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 212.132.75.202

🇩🇪 151.243.11.209

🇧🇪 35.210.229.50

🇹🇼 198.235.24.23

🇬🇶 196.251.241.54

🇪🇹 196.189.127.161

🇨🇭 179.43.153.18

🇲🇽 177.226.161.54

🇵🇪 161.132.40.54

🇳🇱 64.205.72.103

🇺🇸 52.90.188.216

🇭🇰 46.247.61.50

🇧🇷 45.229.91.2

🇳🇱 45.148.10.152

🇷🇺 45.85.65.149

🇺🇸 24.234.215.97

🇴🇲 5.36.65.38

🇺🇸 199.165.159.131

🇺🇸 195.184.76.192

🇺🇸 129.121.102.166