JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.37.116.223

198.37.116.223 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 1%: ?

ISP	H4Y Technologies LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS397423
Domain Name	h4y.us
Country	🇺🇸 United States of America
City	Hapeville, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.37.116.223

Whois 198.37.116.223

IP Abuse Reports for 198.37.116.223:

This IP address has been reported a total of 13 times from 5 distinct sources. 198.37.116.223 was first reported on May 30th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:07:04 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:07:00.254804 2026] [security2:error] [pid 12707:tid 12735] [client 198.37.116.223:53431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mail.kettlehill.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.kettlehill.com"] [uri "/"] [unique_id "ahzpRPr1zQOtbkd9viUnpwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 20:51:31 (2 months ago)	(mod_security) mod_security (id:212620) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212620) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 16:51:27.159383 2026] [security2:error] [pid 88221:tid 88221] [client 198.37.116.223:38301] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.nbcnewsradio.com"] [uri "/ajax/apps/manifests"] [unique_id "ada_zzgtYze0_FX4Dj0W2gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-06 11:01:01 (3 months ago)	\| Shellshock attack attempt	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-03-01 20:25:44 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 15:25:36.536024 2026] [security2:error] [pid 32106:tid 32127] [client 198.37.116.223:60343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.kettlehill.com"] [uri "/wp-config.php"] [unique_id "aaSgwMyHAVRioPijSO-CrgAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 07:10:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 02:10:13.933206 2025] [security2:error] [pid 27471:tid 27510] [client 198.37.116.223:36235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.net"] [uri "/.env.live"] [unique_id "aS0_VXLXOKC0tXS7y0k9EQAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 Erpelstolz	2025-11-25 11:24:37 (7 months ago)	VM 131: 198.37.116.223 - - [25/Nov/2025:12:24:24 +0100] "GET /partymgr/control/getJSONuiLabelArray H ... show more VM 131: 198.37.116.223 - - [25/Nov/2025:12:24:24 +0100] "GET /partymgr/control/getJSONuiLabelArray HTTP/1.1" 404 8452 show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 06:19:19 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 01:19:12.364431 2025] [security2:error] [pid 12048:tid 12048] [client 198.37.116.223:37513] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/ftp.db"] [unique_id "aRQm4DlK8y7FwnYigGLUDAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-16 19:07:35 (8 months ago)	ET WEB_SERVER Kubernetes Ingress NGINX Controller auth-tls-match-cn Annotation Injection (CVE-2025-1 ... show more ET WEB_SERVER Kubernetes Ingress NGINX Controller auth-tls-match-cn Annotation Injection (CVE-2025-1097) show less	SQL Injection Web App Attack
🇮🇪 RoboSOC	2025-10-15 00:01:22 (8 months ago)	Microsoft Windows win.ini Access Attempt Detected , PTR: PTR record not found	Hacking
🇺🇸 TPI-Abuse	2025-10-01 15:50:34 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:50:27.232590 2025] [security2:error] [pid 30036:tid 30091] [client 198.37.116.223:57959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.net"] [uri "/.env.production"] [unique_id "aN1Nw54Gg6n9TdaAp9hzDwAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 22:27:33 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 18:27:24.736051 2025] [security2:error] [pid 12524:tid 12524] [client 198.37.116.223:41657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.deandobkin.com"] [uri "/_.htaccess"] [unique_id "aNHNTIsklCw9YQamiXqQigAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 06:42:39 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:42:31.225164 2025] [security2:error] [pid 3331447:tid 3331468] [client 198.37.116.223:51943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.net"] [uri "/wp-config.php.inc"] [unique_id "aIxh11SZjg6lcpTf51ZbgAAAAZE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 20:16:12 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 198.37.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 16:16:06.526639 2025] [security2:error] [pid 620970:tid 620970] [client 198.37.116.223:47811] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/errors/errors.log"] [unique_id "aDoSBiZ-5KfKuYz-VRCVbwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.180

🇧🇷 191.5.31.61

🇨🇳 180.76.61.232

🇳🇱 161.35.145.35

🇺🇸 137.184.124.132

🇺🇸 66.132.172.198

🇺🇸 20.118.224.96

🇺🇸 216.25.89.122

🇭🇳 200.115.98.209

🇨🇳 182.32.243.53

🇺🇸 165.154.254.143

🇺🇸 164.90.142.12

🇸🇪 95.155.228.189

🇺🇸 70.95.248.65

🇳🇱 45.148.10.147

🇺🇸 44.204.209.124

🇳🇱 34.178.21.247

🇨🇳 8.152.99.77

🇮🇩 103.27.207.14

🇪🇸 90.162.116.66