JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

198.203.28.161

Neutral Activity

Abuse confidence score ?

0% Low Risk

180 reports

78 reporters · latest 1 year ago

ISP	Hugeserver Networks, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	hugeserver.com
Country	🇺🇸 United States of America
City	Jacksonville, Florida

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

198.203.28.161 has been reported 180 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 198.203.28.161

This IP address has been reported a total of 180 times from 78 distinct sources. 198.203.28.161 was first reported on January 12th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aglenday	2025-05-29 22:42:20 (1 year ago)	(imapd) Failed IMAP login from 198.203.28.161 (US/United States/unknown-client.static.huge-dns.com): ... show more (imapd) Failed IMAP login from 198.203.28.161 (US/United States/unknown-client.static.huge-dns.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-05-30T08:42:17.906879+10:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=198.203.28.161, lip=149.28.182.117, TLS: Connection closed, session=<VzFMAk425xTGyxyh> show less	Port Scan
🇺🇸 TPI-Abuse	2025-05-06 10:27:22 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 198.203.28.161 (unknown-client.static.huge-dns. ... show more (mod_security) mod_security (id:210350) triggered by 198.203.28.161 (unknown-client.static.huge-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 06:27:17.698685 2025] [security2:error] [pid 3160770:tid 3160770] [client 198.203.28.161:14319] [client 198.203.28.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|med-engineering.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "med-engineering.com"] [uri "/"] [unique_id "aBnkBe67nKZgsl_8guetsgAAABU"], referer: https://med-engineering.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-04-19 07:00:26 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-04-12 14:02:08 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-22 13:33:37 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 198.203.28.161 (unknown-client.static.huge-dns. ... show more (mod_security) mod_security (id:210350) triggered by 198.203.28.161 (unknown-client.static.huge-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 22 08:33:33.434220 2025] [security2:error] [pid 25732:tid 25732] [client 198.203.28.161:10951] [client 198.203.28.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.greenmountainfeeds.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.greenmountainfeeds.com"] [uri "/"] [unique_id "Z7nSLckt5hW62Ngi5pmITAAAAAw"], referer: https://www.greenmountainfeeds.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Buster	2025-02-04 21:30:00 (1 year ago)	Repeated pointless script kiddie mass attack attempts on multiple sites from Perm Blocked ASN and co ... show more Repeated pointless script kiddie mass attack attempts on multiple sites from Perm Blocked ASN and country show less	Open Proxy Hacking Brute-Force Web App Attack
🇩🇪 mondor.ro	2025-02-04 19:56:56 (1 year ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 198.203.28.161, Reason ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 198.203.28.161, Reason:[(manifest) WordPress wlwmanifest.xml Attack 198.203.28.161 (US/United States/unknown-client.static.huge-dns.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇩🇪 DEV-DNS	2025-02-04 19:32:00 (1 year ago)	(wordpress) Failed wordpress login from 198.203.28.161 (US/United States/Florida/Jacksonville/unknow ... show more (wordpress) Failed wordpress login from 198.203.28.161 (US/United States/Florida/Jacksonville/unknown-client.static.huge-dns.com/[redacted]) show less	Brute-Force
🇩🇪 todix	2025-02-04 19:28:44 (1 year ago)	WebAttack or semilar from 198.203.28.161	Web App Attack
🇺🇸 Epimetheus	2025-02-04 19:24:34 (1 year ago)	Unauthorized access attempts: From: 198.203.28.161 Method: HTTP GET URI Path: /cms/wp-includes ... show more Unauthorized access attempts: From: 198.203.28.161 Method: HTTP GET URI Path: /cms/wp-includes/wlwmanifest.xml UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Web App Attack
Anonymous	2025-02-04 19:12:30 (1 year ago)	(wordpress) Failed wordpress login from 198.203.28.161 (US/United States/unknown-client.static.huge- ... show more (wordpress) Failed wordpress login from 198.203.28.161 (US/United States/unknown-client.static.huge-dns.com) show less	Brute-Force
🇳🇱 Savvii	2025-02-04 19:07:46 (1 year ago)	10 attempts against mh-misc-ban on tree	Web App Attack
🇫🇷 Kenshin869	2025-02-04 18:12:58 (1 year ago)	W4 Wordpress unauthorized access attempt	Brute-Force
🇳🇱 Savvii	2025-02-04 14:30:25 (1 year ago)	10 attempts against mh-misc-ban on cell	Web App Attack
🇸🇬 pusathosting.com	2025-02-04 12:30:17 (1 year ago)	2ds22 bruteforce	Brute-Force Web App Attack

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.46.149.176

🇺🇸 205.210.31.69

🇹🇷 185.21.7.202

🇦🇷 170.245.233.224

🇦🇷 138.117.15.100

🇬🇧 35.203.210.230

🇩🇪 213.209.159.19

🇲🇾 202.165.16.203

🇳🇱 178.16.54.250

🇯🇵 128.28.144.58

🇨🇳 125.44.53.77

🇨🇳 120.230.19.40

🇵🇭 120.28.109.188

🇭🇰 101.36.125.2

🇫🇷 85.217.140.27

🇳🇱 195.178.110.232

🇬🇧 193.163.125.201

🇺🇸 172.191.239.155

🇸🇬 145.223.144.160

🇷🇴 80.94.95.43