JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.181.148.137

107.181.148.137 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	SYN LTD
Usage Type	Fixed Line ISP
ASN	AS64080
Domain Name	syn.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.181.148.137

Whois 107.181.148.137

IP Abuse Reports for 107.181.148.137:

This IP address has been reported a total of 17 times from 8 distinct sources. 107.181.148.137 was first reported on October 30th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-06-01 11:25:31 (1 month ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-01 11:23:51 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:23:35.008902 2026] [security2:error] [pid 16722:tid 16891] [client 107.181.148.137:48519] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.com\|F\|2"] [data ".example.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/www.example.com"] [unique_id "aX83t8yMbG6v0xSDvGJULgAAAsU"], referer: http://kettlehill.com//www.example.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 19:43:47 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 14:43:42.501223 2026] [security2:error] [pid 11749:tid 11749] [client 107.181.148.137:47943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".nbcnewsradio.com.key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/ssl/mail.nbcnewsradio.com.key"] [unique_id "aWqU7vZPh04vTo3NdDyQUwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 17:27:38 (6 months ago)	(mod_security) mod_security (id:221260) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:221260) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:27:02.408928 2025] [security2:error] [pid 27849:tid 28204] [client 107.181.148.137:40845] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\$\\\$\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcalendars.kettlehill.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.net"] [uri "/cgi-bin/status"] [unique_id "aVK55lQ7a22kNO2lY86URwAAAMQ"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 01:17:36 (11 months ago)	(mod_security) mod_security (id:221260) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:221260) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:17:31.181962 2025] [security2:error] [pid 404369:tid 404474] [client 107.181.148.137:41173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\$\\\$\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcalendars.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.com"] [uri "/cgi-bin/status"] [unique_id "aIV-K41ApCwrT9-Kn8XIFAAAAIU"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-22 22:15:39 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-29 23:38:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 107.181.148.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 19:38:40.254783 2025] [security2:error] [pid 3775412:tid 3775412] [client 107.181.148.137:53115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/wp-config.php.html"] [unique_id "aDjwAM5q4GOS3xhSLs-mywAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 02:40:36 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇨🇭 backslash	2024-10-07 12:15:05 (1 year ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇸🇬 oncord	2024-10-07 03:54:33 (1 year ago)	Form spam	Web Spam
🇸🇬 oncord	2024-10-02 22:44:12 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-10-02 03:39:29 (1 year ago)	(From [email protected]) As you've received our message, we can deliver your message to ... show more (From [email protected]) As you've received our message, we can deliver your message to millions of readers successfully! Unleash the power of bulk contact form submissions with our services. Reach millions of website owners every day and experience instant results. We can submit up to 1 million messages per day, driving: + Targeted Traffic + Qualified Leads + New Clients + Increased Purchases Make use of our service now! Starting from $9. ++ Check out: https://bit.ly/formsubmitbulk If you want to remove yourself from newsletter list and all future emails, please fill the form at https://bit.ly/unsubscrme Via Lagrange 79, Musignano, VT, Italy, 1011 show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-26 19:39:27 (1 year ago)	(From [email protected]) Hi, Are you finding it hard to find time for writing ... show more (From [email protected]) Hi, Are you finding it hard to find time for writing articles? Bring in an expert SEO writer today! All the research is done for you and deliver well-written search engine optimized content perfect for higher ranking and better visitor engagement. Looking for fresh content for your website or content marketing strategies, see our current content deals here: https://bit.ly/writingbyben Ben Contact me directly at [email protected] or on Skype: behinger19 with any questions. If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
Anonymous	2024-09-16 13:08:19 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 ChamberofCommerce.com	2023-11-05 23:29:11 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.36

🇬🇧 118.26.104.212

🇨🇳 106.13.95.100

🇩🇪 46.101.235.18

🇩🇪 209.50.182.14

🇵🇰 202.63.202.129

🇺🇸 198.232.216.95

🇮🇷 194.5.176.86

🇳🇱 185.242.226.8

🇳🇱 185.223.235.24

🇨🇷 179.48.248.245

🇵🇰 163.61.91.104

🇺🇸 158.247.18.0

🇸🇬 145.223.130.239

🇩🇪 104.207.54.163

🇧🇬 91.92.47.66

🇺🇸 74.82.47.49

🇺🇸 71.6.134.235

🇭🇰 47.76.129.57

🇻🇳 27.78.120.189