JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.54.114.127

198.54.114.127 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Namecheap, Inc.
Usage Type	Content Delivery Network
ASN	AS22612
Hostname(s)	premium330.web-hosting.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.54.114.127

Whois 198.54.114.127

IP Abuse Reports for 198.54.114.127:

This IP address has been reported a total of 51 times from 36 distinct sources. 198.54.114.127 was first reported on August 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-08-29 05:51:42 (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-08-29 04:15:28 (2 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 LRob	2026-08-29 03:43:22 (3 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-08-29 03:43 UTC show less	Hacking Web App Attack
🇫🇷 Lunix	2026-08-29 03:21:16 (3 hours ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-08-29 02:16:02 (4 hours ago)	198.54.114.127 - - [29/Aug/2026:04:15:01 +0200] "POST /wp-login.php HTTP/1.1" 200 9906 "https://stag ... show more 198.54.114.127 - - [29/Aug/2026:04:15:01 +0200] "POST /wp-login.php HTTP/1.1" 200 9906 "https://staging.start-the-loop.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:04:16:00 +0200] "POST /wp-login.php HTTP/1.1" 200 16112 "https://demo-2020child.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:04:16:01 +0200] "POST /wp-login.php HTTP/1.1" 200 16106 "https://demo-2020child.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 Marc	2026-08-29 01:08:37 (5 hours ago)	198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5 ... show more 198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:03:08:36 +0200] "POST /wp-login.php HTTP/2.0" 403 11939 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C show less	Brute-Force Web App Attack
Anonymous	2026-08-29 00:47:11 (6 hours ago)	WordPress Brute Force	Brute-Force
🇫🇷 masterguru	2026-08-29 00:33:02 (6 hours ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 198.54.114.127 (US/United States/premium330.w ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 198.54.114.127 (US/United States/premium330.web-hosting.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇮🇳 evicky2002	2026-08-29 00:00:42 (7 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 juutis	2026-08-28 23:22:33 (7 hours ago)	198.54.114.127 - - [27/Aug/2026:23:13:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taid ... show more 198.54.114.127 - - [27/Aug/2026:23:13:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [28/Aug/2026:03:32:07 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:01:22:32 +0200] "POST /wp-login.php HTTP/1.1" 200 9615 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-08-28 23:17:10 (7 hours ago)	198.54.114.127 - - [29/Aug/2026:01:17:09 +0200] "POST /wp-login.php HTTP/1.1" 200 16112 "https://dem ... show more 198.54.114.127 - - [29/Aug/2026:01:17:09 +0200] "POST /wp-login.php HTTP/1.1" 200 16112 "https://demo-2020child.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:01:17:09 +0200] "POST /wp-login.php HTTP/1.1" 200 16106 "https://demo-2020child.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 198.54.114.127 - - [29/Aug/2026:01:17:09 +0200] "POST /wp-login.php HTTP/1.1" 200 16128 "https://demo-2020child.wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2026-08-28 23:06:59 (7 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 nyt	2026-08-28 22:09:15 (8 hours ago)	Repeated WordPress login POSTs blocked by WAF (3 in 6h)	Brute-Force Web App Attack
🇬🇧 Apache	2026-08-28 21:02:06 (10 hours ago)	(wplogin) WordPress login brute-force 198.54.114.127 (US/United States/premium330.web-hosting.com): ... show more (wplogin) WordPress login brute-force 198.54.114.127 (US/United States/premium330.web-hosting.com): 5 in the last 300 secs show less	Brute-Force
Anonymous	2026-08-28 19:55:20 (11 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.54.120.220

🇬🇧 185.216.145.190

🇩🇪 167.94.146.48

🇺🇸 162.243.170.10

🇺🇸 162.216.149.251

🇨🇳 120.48.175.122

🇧🇩 116.204.228.103

🇻🇳 103.179.190.58

🇧🇬 79.124.62.126

🇨🇦 52.139.37.240

🇧🇷 45.181.242.66

🇺🇸 20.65.178.67

🇸🇪 185.217.0.181

🇩🇪 167.233.141.18

🇺🇸 152.32.235.180

🇳🇱 81.19.216.120

🇧🇬 79.124.62.230

🇲🇽 68.155.159.216

🇺🇸 65.49.20.66

🇺🇸 45.79.190.10