JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.105.100.174

198.105.100.174 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 1%: ?

ISP	SYN LTD
Usage Type	Fixed Line ISP
ASN	AS64080
Domain Name	syn.uk
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.105.100.174

Whois 198.105.100.174

IP Abuse Reports for 198.105.100.174:

This IP address has been reported a total of 8 times from 3 distinct sources. 198.105.100.174 was first reported on March 6th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:42:38 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:42:34.164434 2026] [security2:error] [pid 7732:tid 7751] [client 198.105.100.174:47247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/db.php.bak"] [unique_id "ahzxmiKq_i-FrRbJEDINIgAAAUU"], referer: http://kettlehill.com/db.php.bak show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 06:25:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:25:47.412056 2025] [security2:error] [pid 30768:tid 30789] [client 198.105.100.174:42471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.net"] [uri "/a.htaccess"] [unique_id "aS006_5kVQ-rlVW6wYRxRwAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 20:11:03 (7 months ago)	(mod_security) mod_security (id:212620) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:212620) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 16:10:55.658267 2025] [security2:error] [pid 28441:tid 28441] [client 198.105.100.174:47401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.nbcnewsradio.com:80\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.nbcnewsradio.com"] [uri "/examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [unique_id "aQEjTwGZ-nab0iyFjEVL_gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 17:29:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 13:29:32.466901 2025] [security2:error] [pid 23624:tid 23633] [client 198.105.100.174:54185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.fandgins.com"] [uri "/.env.production"] [unique_id "aQD9fFHcjzw71v0-k4ocPAAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-01 04:06:43 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 00:06:35.919314 2025] [security2:error] [pid 4167007:tid 4167029] [client 198.105.100.174:54617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.net"] [uri "/.htaccess"] [unique_id "aLUby7JvJhw2WatQMF5MigAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 17:49:07 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.105.100.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 13:49:01.266571 2025] [security2:error] [pid 14845:tid 14845] [client 198.105.100.174:38733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/htaccess_for_page_not_found_redirects.htaccess"] [unique_id "aJJEDWkTyMnpGa5lvYsRUwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-28 05:30:04 (10 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2024-03-06 05:45:12 (2 years ago)	ASP.NET Web Forms Bruteforce	Brute-Force

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.6.11

🇪🇸 141.109.168.26

🇫🇷 109.199.106.34

🇱🇻 81.30.98.44

🇩🇪 69.5.169.178

🇨🇭 185.191.239.92

🇺🇸 172.253.209.150

🇻🇳 171.244.39.95

🇫🇮 147.185.133.150

🇺🇦 46.149.191.249

🇺🇸 2600:1f18:3120:f501:9092:fcc8:e760:a862

🇮🇳 223.233.87.52

🇩🇪 178.128.194.134

🇺🇸 162.216.150.50

🇵🇰 154.57.216.142

🇸🇬 150.109.12.135

🇺🇸 147.185.132.98

🇳🇱 91.92.42.10

🇳🇱 91.92.40.240

🇮🇷 85.185.206.227