JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.203.28.193

198.203.28.193 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 0%: ?

ISP	Hugeserver Networks, LLC
Usage Type	Unknown
ASN	Unknown
Domain Name	hugeserver.com
Country	🇺🇸 United States of America
City	Jacksonville, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.203.28.193

Whois 198.203.28.193

IP Abuse Reports for 198.203.28.193:

This IP address has been reported a total of 172 times from 57 distinct sources. 198.203.28.193 was first reported on November 19th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Mcshield.org	2025-12-01 04:41:59 (6 months ago)	Possible port scan detected from 198.203.28.193 (masscan/nmap signature)	Email Spam Port Scan
🇳🇱 Mangelot Hosting	2025-10-07 07:44:41 (8 months ago)	(modsecurity) srv101 ModSecurity 198.203.28.193 (US/United States/unknown-client.static.huge-dns.com ... show more (modsecurity) srv101 ModSecurity 198.203.28.193 (US/United States/unknown-client.static.huge-dns.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2025-09-16 19:38:19 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 198.203.28.193 (unknown-client.static.huge-dns. ... show more (mod_security) mod_security (id:210492) triggered by 198.203.28.193 (unknown-client.static.huge-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 15:38:14.678067 2025] [security2:error] [pid 5614:tid 5614] [client 198.203.28.193:30771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weather.stricklinranch.com"] [uri "/.env"] [unique_id "aMm8ptHwxOtT5iWHHag6qgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-08-07 00:04:03 (10 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇪🇸 Global Cyber Police	2025-07-28 07:40:25 (10 months ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-27 15:15:17 (11 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2025-05-21 10:28:23 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 198.203.28.193 (unknown-client.static.huge-dns. ... show more (mod_security) mod_security (id:210350) triggered by 198.203.28.193 (unknown-client.static.huge-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 06:28:17.616630 2025] [security2:error] [pid 3447820:tid 3447820] [client 198.203.28.193:3817] [client 198.203.28.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.willowbrookins.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.willowbrookins.com"] [uri "/"] [unique_id "aC2qwRnNBP2SSTuaG3Y1rgAAACM"], referer: http://www.willowbrookins.com show less	Brute-Force Bad Web Bot Web App Attack
🇸🇰 Eurofluid	2025-05-17 04:01:23 (1 year ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
🇵🇱 sefinek.net	2025-05-16 22:03:24 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Port Scan
Anonymous	2025-05-15 15:56:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇵🇱 sefinek.net	2025-05-07 07:00:22 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Port Scan
🇺🇸 TPI-Abuse	2025-05-06 14:28:04 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 198.203.28.193 (unknown-client.static.huge-dns. ... show more (mod_security) mod_security (id:210350) triggered by 198.203.28.193 (unknown-client.static.huge-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 10:28:00.405945 2025] [security2:error] [pid 3783725:tid 3783725] [client 198.203.28.193:1848] [client 198.203.28.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.dandpcreamery.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dandpcreamery.com"] [uri "/"] [unique_id "aBoccN5afcxTOKzo4iEChQAAAAI"], referer: http://www.dandpcreamery.com show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-04-19 10:00:21 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-02-22 14:26:01 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2025-01-20 18:08:18 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.230

🇺🇸 205.210.31.12

🇮🇩 182.9.36.156

🇺🇸 172.237.156.201

🇳🇿 121.73.168.107

🇨🇳 120.55.13.107

🇮🇳 116.72.9.151

🇨🇦 108.163.159.20

🇺🇸 107.173.121.118

🇮🇩 103.129.95.139

🇪🇸 91.126.186.86

🇻🇳 14.225.7.155

🇺🇸 2a03:2880:10ff:9::

🇰🇷 211.180.105.241

🇧🇷 205.210.31.137

🇳🇱 204.76.203.36

🇮🇳 202.141.99.86

🇺🇸 162.216.150.219

🇨🇳 150.255.39.133

🇵🇰 124.29.194.16