JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.186.131.59

198.186.131.59 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 0%: ?

ISP	Ambyre LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13627
Domain Name	ambyre.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.186.131.59

Whois 198.186.131.59

IP Abuse Reports for 198.186.131.59:

This IP address has been reported a total of 157 times from 32 distinct sources. 198.186.131.59 was first reported on November 15th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ecs.ge	2026-04-20 23:27:57 (2 months ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇫🇮 kumiko	2026-04-20 08:50:51 (2 months ago)	[2026-04-20 11:50:50] Apache auth failure: brute force attempt, file probing	Brute-Force Bad Web Bot
🇨🇭 4server	2026-04-20 04:13:23 (2 months ago)	[MonApr2006:13:16.6310782026][security2:error][pid3137534:tid3137541][client198.186.131.59:0]ModSecu ... show more [MonApr2006:13:16.6310782026][security2:error][pid3137534:tid3137541][client198.186.131.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondialtrade.ch\"][uri\"/403.shtml\"][unique_id\"aeWn3PMgdPcQxSVvQ8fHpAAAAEU\"] show less	Hacking Web App Attack
🇺🇸 nodepile	2026-04-20 02:02:47 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/graphql ua='Mozilla/5.0 (M ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/graphql ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2709.82 Safari/537.36') show less	Web App Attack Exploited Host
🇳🇱 Savvii	2026-04-19 16:36:42 (2 months ago)	46 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-04-19 11:27:07 (2 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 198.186.131.59 - - [19/Apr/2026:1 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 198.186.131.59 - - [19/Apr/2026:12:27:05 +0100] GET / HTTP/1.1 403 158 - Mozilla/5.0 (Windows NT 6.2; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0 show less	Web App Attack
🇫🇷 conseilgouz	2026-04-19 09:33:58 (2 months ago)	joe-7 : Trying access unauthorized files/dir=>/language/en-GB/en-GB.astroid.ini	Hacking
🇳🇱 Savvii	2026-04-19 04:01:40 (2 months ago)	37 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-04-19 01:01:33 (2 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 billyw0nka	2026-04-19 00:13:47 (2 months ago)	pattern: admindev	Hacking
🇩🇪 AetherFox	2026-04-18 18:04:16 (2 months ago)	[Sat Apr 18 18:04:11.632153 2026] [authz_core:error] [pid 3985608:tid 3985623] [client 198.186.131.5 ... show more [Sat Apr 18 18:04:11.632153 2026] [authz_core:error] [pid 3985608:tid 3985623] [client 198.186.131.59:53170] AH01630: client denied by server configuration: proxy:http://5.75.191.34/ [Sat Apr 18 18:04:11.632379 2026] [authz_core:error] [pid 3985608:tid 3985623] [client 198.186.131.59:53170] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sat Apr 18 18:04:15.854845 2026] [authz_core:error] [pid 3985608:tid 3985645] [client 198.186.131.59:53170] AH01630: client denied by server configuration: proxy:http://5.75.191.34/media/astroid/css/debug.css, referer: http://draconigen.net/ [Sat Apr 18 18:04:15.855101 2026] [authz_core:error] [pid 3985608:tid 3985645] [client 198.186.131.59:53170] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html, referer: http://draconigen.net/ [Sat Apr 18 18:04:15.998770 2026] [authz_core:error] [pid 3985608:tid 3985647] [client 198.186.131.59:53170] AH01630: client denied by server configuration: pr ... show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-18 17:56:35 (2 months ago)	[SatApr1819:56:31.1204302026][security2:error][pid3493141:tid3493219][client198.186.131.59:0]ModSecu ... show more [SatApr1819:56:31.1204302026][security2:error][pid3493141:tid3493219][client198.186.131.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gm-swiss.ch\"][uri\"/\"][unique_id\"aePFzwM4JrzosPvVCF-1vAAAAQs\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-18 16:31:32 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 nodepile	2026-04-18 01:30:16 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/customer/address_file/uplo ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/customer/address_file/upload ua='Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2702.54 Safari/537.36') show less	Web App Attack Exploited Host
🇳🇱 Savvii	2026-04-17 14:20:04 (2 months ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇨🇳 120.243.125.25

🇸🇬 114.119.155.180

🇨🇳 111.225.149.186

🇳🇱 88.151.33.116

🇩🇪 45.135.194.83

🇺🇸 20.163.32.168

🇺🇸 20.65.145.179

🇺🇸 216.180.246.5

🇧🇩 202.4.117.136

🇬🇧 198.244.226.207

🇩🇪 193.233.74.227

🇫🇷 172.232.47.148

🇨🇳 120.233.73.156

🇳🇱 88.151.32.61

🇸🇬 84.75.148.59

🇰🇷 64.110.90.250

🇰🇷 61.76.112.4

🇩🇪 51.195.62.42

🇳🇱 45.148.10.152