JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.98.183.149

198.98.183.149 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 0%: ?

ISP	AVAST Software
Usage Type	Data Center/Web Hosting/Transit
ASN	AS29889
Domain Name	avast.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.98.183.149

Whois 198.98.183.149

IP Abuse Reports for 198.98.183.149:

This IP address has been reported a total of 151 times from 54 distinct sources. 198.98.183.149 was first reported on October 26th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 myintarweb	2025-10-11 03:28:02 (11 months ago)	198.98.183.149 - - [24/Aug/2025:19:28:03 +0100] 80 "GET /.env HTTP/1.1" 410 1561 "-" "Mozilla/5.0 (X ... show more 198.98.183.149 - - [24/Aug/2025:19:28:03 +0100] 80 "GET /.env HTTP/1.1" 410 1561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇬🇧 myintarweb	2025-09-19 14:55:59 (1 year ago)	198.98.183.149 - - [24/Aug/2025:19:28:03 +0100] 80 "GET /.env HTTP/1.1" 410 1561 "-" "Mozilla/5.0 (X ... show more 198.98.183.149 - - [24/Aug/2025:19:28:03 +0100] 80 "GET /.env HTTP/1.1" 410 1561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2025-09-04 07:41:46 (1 year ago)	AndroxGh0st.Malware	Hacking
🇫🇷 ecode hosting	2025-08-29 07:42:07 (1 year ago)	Domain : anahtarhastanesi.com Rule : env 2025-08-24 19:24:24 10.100.1.20 GET /.env - 80 - 198.98.183 ... show more Domain : anahtarhastanesi.com Rule : env 2025-08-24 19:24:24 10.100.1.20 GET /.env - 80 - 198.98.183.149 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - anahtarhastanesi.com 301 0 0 333 238 1962 - - show less	Hacking SQL Injection
🇹🇷 rtbh.com.tr	2025-08-26 20:08:27 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-26 00:08:26 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-25 20:08:26 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-08-25 05:13:04 (1 year ago)	27 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, password grabbing URLs: GE ... show more 27 attacks on config grabbing URLs (type 2), PHP URLs, env grabbing URLs, password grabbing URLs: GET /config/aws.yml HTTP/1.1 GET /phpinfo.php HTTP/1.1 GET /.env.bak HTTP/1.1 GET /.aws/credentials HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 taivas.nl	2025-08-25 04:32:35 (1 year ago)	Many_bad_calls	Web App Attack
🇺🇸 octageeks.com	2025-08-25 04:06:46 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2025-08-25 00:28:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 198.98.183.149 (r-149-183-98-198.consumer-pool. ... show more (mod_security) mod_security (id:210492) triggered by 198.98.183.149 (r-149-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 20:28:34.287837 2025] [security2:error] [pid 1413885:tid 1413903] [client 198.98.183.149:1749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/.env"] [unique_id "aKuuMrR6HgTjkXpphevjugAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Shadymint	2025-08-24 22:18:41 (1 year ago)	url probing from IP marked as abusive	Web App Attack
🇫🇷 COMAITE	2025-08-24 21:44:34 (1 year ago)	Suspicious URL access.	Web App Attack
🇺🇸 TPI-Abuse	2025-08-24 21:33:55 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 198.98.183.149 (r-149-183-98-198.consumer-pool. ... show more (mod_security) mod_security (id:210492) triggered by 198.98.183.149 (r-149-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 17:33:47.889340 2025] [security2:error] [pid 15258:tid 15276] [client 198.98.183.149:1678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cargomarexpress.com"] [uri "/.env"] [unique_id "aKuFO3gzdBfqR0apbHFs5gAAARA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-08-24 20:25:43 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 198.98.183.149 (US/United States/r- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 198.98.183.149 (US/United States/r-149-183-98-198.consumer-pool.prcdn.net): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.80.223.144

🇧🇷 201.76.120.30

🇮🇩 182.8.89.102

🇩🇪 172.71.148.129

🇺🇸 147.185.132.13

🇺🇸 91.230.168.143

🇺🇸 74.208.195.25

🇬🇧 193.176.29.29

🇨🇱 179.9.18.185

🇩🇪 167.94.146.56

🇳🇱 109.160.32.105

🇷🇺 77.91.65.83

🇸🇳 41.83.51.176

🇲🇾 202.165.25.206

🇳🇱 195.178.110.102

🇲🇽 189.253.54.246

🇷🇺 95.108.213.122

🇩🇪 93.211.50.67

🇺🇦 91.208.194.40

🇫🇷 91.196.152.216