JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.54.134.252

198.54.134.252 was found in our database!

This IP was reported 872 times. Confidence of Abuse is 61%: ?

61%

ISP	TZULO-SJC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11878
Hostname(s)	static-198-54-134-252.cust.tzulo.com
Domain Name	tzulo.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.54.134.252

Whois 198.54.134.252

IP Abuse Reports for 198.54.134.252:

This IP address has been reported a total of 872 times from 183 distinct sources. 198.54.134.252 was first reported on October 18th 2023, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-23 08:51:32 (7 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇧🇪 taivas.nl	2026-07-23 07:02:13 (9 hours ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇫🇷 masterguru	2026-07-23 06:48:16 (10 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇮🇩 Burayot	2026-07-22 22:13:07 (18 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 198.54.134.252 (US/United States/st ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 198.54.134.252 (US/United States/static-198-54-134-252.cust.tzulo.com): 1 in the last 3600 secs show less	Web App Attack
🇫🇷 dynamix	2026-07-20 10:42:18 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-20 10:29:12 (3 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 198.54.134.252 (US/United States/static-198-54 ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 198.54.134.252 (US/United States/static-198-54-134-252.cust.tzulo.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 198.54.134.252 - - [20/Jul/2026:12:29:08 +0200] "POST /xmlrpc.php HTTP/1.1" 404 49052 "-" "Go-http-client/1.1" "-" host=ilfaro.ovh show less	Port Scan
🇦🇺 MAGIC	2026-07-15 04:06:46 (1 week ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 maxpower	2026-07-10 18:47:28 (1 week ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 198.54.134.252 (US/United States/static-198-54 ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 198.54.134.252 (US/United States/static-198-54-134-252.cust.tzulo.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 198.54.134.252 - - [10/Jul/2026:20:47:22 +0200] "POST /xmlrpc.php HTTP/1.1" 404 46280 "-" "Go-http-client/1.1" "-" host=matteoappignani.it show less	Port Scan
🇫🇷 masterguru	2026-07-10 18:37:47 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-201) show less	Bad Web Bot
🇳🇴 jad-abuse	2026-07-08 12:41:58 (2 weeks ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor( ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 15 hits. show less	Port Scan Bad Web Bot
🇨🇳 pengpeng	2026-07-04 04:08:16 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 40214 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 40214 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 bcsaba	2026-07-02 19:06:33 (2 weeks ago)	Looking for json file on web server 198.54.134.252 - - [02/Jul/2026:21:06:32 +0200] "GET /.well-know ... show more Looking for json file on web server 198.54.134.252 - - [02/Jul/2026:21:06:32 +0200] "GET /.well-known/ai-plugin.json HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" show less	Web App Attack
🇺🇸 xmission.com	2026-07-02 09:59:39 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 47931 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 47931 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 198.54.134.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Hmorrin	2026-07-01 02:17:20 (3 weeks ago)		Port Scan
🇨🇳 pengpeng	2026-06-30 15:40:40 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 16328 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 16328 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 872 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 106.215.181.122

🇰🇿 89.218.69.66

🇧🇷 2804:d51:74fa:5b00:c4b7:a75:cdc5:bf7e

🇳🇱 2400:cb00:556:1000:71c2:3c4c:5e98:627b

🇳🇬 165.154.10.250

🇺🇸 129.121.75.215

🇮🇹 62.97.49.213

🇿🇦 4.168.228.242

🇧🇷 177.44.71.76

🇺🇸 172.239.64.86

🇭🇰 162.141.78.119

🇨🇳 118.81.198.74

🇺🇸 107.175.56.6

🇻🇳 103.200.25.79

🇺🇸 100.51.6.16

🇳🇱 89.248.168.227

🇺🇸 52.168.141.47

🇪🇬 45.240.49.126

🇸🇮 31.57.184.229

🇸🇮 31.57.184.228