AbuseIPDB » 154.227.128.92
154.227.128.92
This IP was reported 10 times. Confidence of
Abuse
is 52% : ?
ISP
Airtel-Uganda
Usage Type
Fixed Line ISP
ASN
AS37075
Hostname(s)
92-128-227-154.r.airtel.ug
Domain Name
airtel.in
Country
🇺🇬
Uganda
City
Kampala, Central Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 154.227.128.92 :
This IP address has been reported a total of
10
times from
10 distinct
sources.
154.227.128.92 was first reported on
May 23rd 2025 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
BlueWire Hosting
2026-07-20 12:57:51
(4 days ago)
Probing websites for vulnerabilities
Web App Attack
2026-07-20 12:54:55
(4 days ago)
[redacted] 154.227.128.92 - - [20/Jul/2026:14:53:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ...
show more
[redacted] 154.227.128.92 - - [20/Jul/2026:14:53:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.1; http://site81030773.com"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.2; http://site55529917.com"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.2; http://site77532715.com"
[redacted] 154.227.128.92 - - [20/Jul/2026:14:54:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "
...
show less
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-07-20 12:50:30
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-07-20 12:42:18
(4 days ago)
(wordpress) Failed wordpress login from 154.227.128.92 (UG/Uganda/92-128-227-154.r.airtel.ug)
Brute-Force
2026-07-20 12:42:10
(4 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-07-20 12:30:19
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
WeekendWeb
2026-07-20 12:15:56
(4 days ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TAY
2026-07-20 10:18:48
(4 days ago)
154.227.128.92 - - [20/Jul/2026:18:18:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "WordPress. ...
show more
154.227.128.92 - - [20/Jul/2026:18:18:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "WordPress.com; https://wordpress.com"
154.227.128.92 - - [20/Jul/2026:18:18:37 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "WordPress.com; https://wordpress.com"
154.227.128.92 - - [20/Jul/2026:18:18:47 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5893 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force
2026-06-24 09:44:15
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
2025-05-23 04:02:10
(1 year ago)
Web attack
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: