JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.54.114.33

198.54.114.33 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 0%: ?

ISP	Namecheap, Inc.
Usage Type	Content Delivery Network
ASN	AS22612
Hostname(s)	server216.web-hosting.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.54.114.33

Whois 198.54.114.33

IP Abuse Reports for 198.54.114.33:

This IP address has been reported a total of 192 times from 72 distinct sources. 198.54.114.33 was first reported on January 10th 2021, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rip	2025-11-12 01:00:32 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 06:28:54 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 01:28:49.278847 2025] [security2:error] [pid 27278:tid 27278] [client 198.54.114.33:33072] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.roughexports.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.roughexports.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRLXof9SiEzVemU_UFR26QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2025-11-10 19:53:18 (7 months ago)	Attacking WordPress 198.54.114.33 - - [10/Nov/2025:20:53:08 +0100] "POST /wp-login.php HTTP/2.0" 503 ... show more Attacking WordPress 198.54.114.33 - - [10/Nov/2025:20:53:08 +0100] "POST /wp-login.php HTTP/2.0" 503 19291 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 17:49:40 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 12:49:35.708171 2025] [security2:error] [pid 7267:tid 7267] [client 198.54.114.33:45254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fletcherdouglas.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fletcherdouglas.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aRIlr9vgmyAEkriTTVnNQAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 16:19:08 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 198.54.114.33 (server216.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 11:19:03.794635 2025] [security2:error] [pid 3017:tid 3017] [client 198.54.114.33:40808] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.masalamadrid.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.masalamadrid.com"] [uri "/wp-json/wp/V2/users"] [unique_id "aRIQd1lPW4wBiL8g0BC3DQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 etu brutus	2025-11-10 09:35:24 (7 months ago)	198.54.114.33 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇸 smithclass.net	2025-11-10 01:08:43 (8 months ago)	Nov 10 01:08:42 gravy wordpress(smithclass.net)[192964]: Blocked authentication attempt for admin fr ... show more Nov 10 01:08:42 gravy wordpress(smithclass.net)[192964]: Blocked authentication attempt for admin from 198.54.114.33 ... show less	Hacking Brute-Force
🇲🇹 Malta	2025-11-09 22:49:07 (8 months ago)	198.54.114.33 - - [09/Nov/2025:23:49:07 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 198.54.114.33 - - [09/Nov/2025:23:49:07 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 octageeks.com	2025-11-09 05:06:18 (8 months ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇲🇹 Malta	2025-11-08 15:08:22 (8 months ago)	198.54.114.33 - - [08/Nov/2025:16:08:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 198.54.114.33 - - [08/Nov/2025:16:08:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 Sysadmin Peter	2025-11-07 18:19:22 (8 months ago)	198.54.114.33 - - [07/Nov/2025:19:18:11 +0100] "POST /wp-login.php HTTP/2.0" 200 3025 "https://ja-so ... show more 198.54.114.33 - - [07/Nov/2025:19:18:11 +0100] "POST /wp-login.php HTTP/2.0" 200 3025 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 198.54.114.33 - - [07/Nov/2025:19:19:21 +0100] "POST /wp-login.php HTTP/2.0" 200 3025 "https://ja-solar.nz/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 rafled	2025-11-07 06:21:10 (8 months ago)	Attempt to login to Wordpress Admin	Web App Attack
🇩🇪 london2038.com	2025-11-06 21:08:07 (8 months ago)	Attacking WordPress 198.54.114.33 - - [06/Nov/2025:22:08:06 +0100] "POST /wp-login.php HTTP/2.0" 503 ... show more Attacking WordPress 198.54.114.33 - - [06/Nov/2025:22:08:06 +0100] "POST /wp-login.php HTTP/2.0" 503 19289 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
Anonymous	2025-06-14 20:44:20 (1 year ago)	Trawling for Open Source CMS installs	Hacking Brute-Force
🇨🇭 teamsecure	2025-06-14 20:42:56 (1 year ago)	Banned for trying to access xmlrpc	Web App Attack

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.111.152.222

🇸🇬 136.110.22.108

🇧🇷 45.229.91.34

🇲🇾 203.121.40.210

🇬🇹 190.61.100.197

🇧🇷 170.245.65.247

🇫🇮 147.185.133.198

🇧🇷 138.121.40.127

🇳🇱 85.11.167.118

🇩🇪 63.185.25.249

🇰🇷 3.38.254.143

🇮🇳 103.237.58.123

🇷🇴 92.118.39.50

🇧🇬 79.124.40.126

🇺🇸 66.132.172.119

🇺🇸 16.144.80.100

🇯🇵 8.216.7.115

🇨🇳 222.75.225.206

🇧🇪 198.235.24.233

🇵🇱 176.53.159.198