JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.186.130.10

198.186.130.10 was found in our database!

This IP was reported 308 times. Confidence of Abuse is 71%: ?

71%

ISP	Ambyre LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13627
Domain Name	ambyre.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.186.130.10

Whois 198.186.130.10

IP Abuse Reports for 198.186.130.10:

This IP address has been reported a total of 308 times from 45 distinct sources. 198.186.130.10 was first reported on January 1st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 11:09:23 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 198.186.130.10 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 198.186.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:09:16.997424 2026] [security2:error] [pid 20233:tid 20233] [client 198.186.130.10:58394] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|twixmixy.com\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twixmixy.com"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "ai6L3BSnOw4sK4JHbrhAYAAAAAM"], referer: http://twixmixy.com/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 08:42:33 (1 week ago)	WEB attack	Brute-Force
🇩🇪 ecs.ge	2026-06-14 04:30:04 (1 week ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇺🇸 nodepile	2026-06-13 18:50:36 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/rest/V1/guest-carts ua='Mo ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/rest/V1/guest-carts ua='Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2933.64 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 4server	2026-06-12 20:32:04 (1 week ago)	[FriJun1222:32:01.2238892026][security2:error][pid42812:tid42826][client198.186.130.10:0]ModSecurity ... show more [FriJun1222:32:01.2238892026][security2:error][pid42812:tid42826][client198.186.130.10:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"scrspace.com\"][uri\"/\"][unique_id\"aixswYuajkKOpILj5tiltQAAAAM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 06:12:12 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 198.186.130.10 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 198.186.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:12:08.344466 2026] [security2:error] [pid 2371:tid 2371] [client 198.186.130.10:49424] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pyxelstudios.com\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pyxelstudios.com"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "aiujOAz9leAPwZ1ovjswUQAAAAs"], referer: http://pyxelstudios.com/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-06-11 17:37:17 (1 week ago)	vee-Joomla Admin : try to force the door...	Hacking
🇺🇸 nodepile	2026-06-11 11:21:57 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/rest/V1/guest-carts ua='Mo ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/rest/V1/guest-carts ua='Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:49.0) Gecko/20100101 Firefox/49.0') show less	Web App Attack Exploited Host
🇩🇪 conseilgouz	2026-06-11 05:40:23 (1 week ago)	coe-Joomla Admin : try to force the door...	Hacking
🇩🇪 conseilgouz	2026-06-11 00:35:48 (1 week ago)	lae-Joomla Admin : try to force the door...	Hacking
🇨🇭 4server	2026-06-10 17:16:11 (2 weeks ago)	[WedJun1019:16:07.0013942026][security2:error][pid3126977:tid3127613][client198.186.130.10:0]ModSecu ... show more [WedJun1019:16:07.0013942026][security2:error][pid3126977:tid3127613][client198.186.130.10:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/bitrix/tools/spread.php\"][unique_id\"aimb1kDe9hJlBgXm3TERggAAANY\"] show less	Hacking Web App Attack
🇩🇪 conseilgouz	2026-06-10 16:05:13 (2 weeks ago)	doe-Joomla Admin : try to force the door...	Hacking
🇩🇪 conseilgouz	2026-06-10 14:29:46 (2 weeks ago)	sle-Joomla Admin : try to force the door...	Hacking
🇩🇪 conseilgouz	2026-06-10 13:26:30 (2 weeks ago)	ece-Joomla Admin : try to force the door...	Hacking
🇫🇷 conseilgouz	2026-06-10 11:29:59 (2 weeks ago)	sce-Joomla Admin : try to force the door...	Hacking

Showing 1 to 15 of 308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.156.93.203

🇺🇸 153.66.28.132

🇰🇷 115.140.161.61

🇩🇪 43.157.50.58

🇺🇸 17.246.19.224

🇬🇧 195.96.139.185

🇹🇼 111.70.32.11

🇱🇻 95.182.80.111

🇳🇱 45.148.10.157

🇬🇧 35.203.211.242

🇺🇸 20.161.30.192

🇨🇭 172.71.141.34

🇨🇳 121.229.156.19

🇳🇱 91.92.40.11

🇱🇻 81.30.98.44

🇫🇷 77.132.102.63

🇳🇱 5.255.104.130

🇺🇸 2607:f8b0:4003:c1e::124

🇨🇳 120.239.148.22

🇨🇳 112.86.225.236