JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.181.148.52

107.181.148.52 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 3%: ?

ISP	SYN LTD
Usage Type	Fixed Line ISP
ASN	AS64080
Domain Name	syn.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.181.148.52

Whois 107.181.148.52

IP Abuse Reports for 107.181.148.52:

This IP address has been reported a total of 10 times from 2 distinct sources. 107.181.148.52 was first reported on August 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:28:00 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:27:57.630803 2026] [security2:error] [pid 7577:tid 7688] [client 107.181.148.52:52563] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.com"] [uri "/admin/logs/error.log"] [unique_id "ahzuLY6nP6TlQzUBlJvVHgAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 11:58:02 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:57:56.376171 2026] [security2:error] [pid 483:tid 654] [client 107.181.148.52:59515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.kettlehill.com"] [uri "/.git/config"] [unique_id "aX8_xAMxl-cQ0UzvOvSQ-gAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 06:21:23 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 01:21:20.017666 2026] [security2:error] [pid 19347:tid 19347] [client 107.181.148.52:51281] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/php_errors.log"] [unique_id "aWnY4MFvQJfNdNKYgOwgEQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:46:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:46:03.346489 2025] [security2:error] [pid 30839:tid 30839] [client 107.181.148.52:40023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farmers123.com"] [uri "/.env.live"] [unique_id "aS9sK_1Y_RoZMCpIcsrQvAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 06:29:36 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:29:33.347126 2025] [security2:error] [pid 30768:tid 30785] [client 107.181.148.52:36793] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.kettlehill.net\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/db_config.php.bak"] [unique_id "aS01zf5kVQ-rlVW6wYRyYQAAAU0"], referer: http://ftp.kettlehill.net/db_config.php.bak show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 06:17:32 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 02:17:25.740169 2025] [security2:error] [pid 22611:tid 22611] [client 107.181.148.52:53977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/nbcnewsradio.db"] [unique_id "aQGxdRYCdHj_O14E3WVZmgAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 14:43:08 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:43:03.343145 2025] [security2:error] [pid 31609:tid 31661] [client 107.181.148.52:36987] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.com"] [uri "/application/logs/default.log"] [unique_id "aN0990goBUJS8Bc29MuzSQAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 18:19:34 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 14:19:30.426759 2025] [security2:error] [pid 14481:tid 14481] [client 107.181.148.52:39613] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/footer.php.bak"] [unique_id "aJJLMgHQXkmJH_Nt9GBBJAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-02 03:40:02 (10 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 06:35:26 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 107.181.148.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:35:16.450690 2025] [security2:error] [pid 3331447:tid 3331475] [client 107.181.148.52:48555] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.net\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.net"] [uri "/wp-login.php.bak"] [unique_id "aIxgJFSZjg6lcpTf51ZNRwAAAZg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.63

🇳🇱 185.224.128.16

🇬🇧 87.236.176.244

🇺🇸 74.125.186.84

🇩🇪 69.5.169.210

🇳🇱 45.198.224.18

🇳🇱 45.156.128.130

🇳🇱 45.148.10.157

🇫🇷 2001:861:c64:d40:3dca:a97:5246:ece9

🇬🇧 195.96.139.90

🇲🇽 187.191.48.24

🇭🇰 152.32.214.226

🇫🇮 147.185.133.210

🇺🇸 137.184.232.203

🇷🇴 80.94.92.187

🇺🇸 44.141.53.214

🇬🇦 41.159.150.25

🇺🇸 38.133.80.137

🇧🇷 205.210.31.138

🇹🇷 166.1.2.18