JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 67.20.116.98

67.20.116.98 was found in our database!

This IP was reported 270 times. Confidence of Abuse is 100%: ?

100%

ISP	Unified Layer
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Hostname(s)	host2125.hostmonster.com
Domain Name	unifiedlayer.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 67.20.116.98

Whois 67.20.116.98

IP Abuse Reports for 67.20.116.98:

This IP address has been reported a total of 270 times from 112 distinct sources. 67.20.116.98 was first reported on October 2nd 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-06-20 16:50:03 (1 hour ago)	Autoban IP(2): 67.20.116.98 - Hostname: Oracle Corporation - City: Phoenix - Region: Arizona - Count ... show more Autoban IP(2): 67.20.116.98 - Hostname: Oracle Corporation - City: Phoenix - Region: Arizona - Country: United States - Location: - Organization: Oracle Corporation - failed attempts. show less	Web App Attack
🇩🇪 Ba-Yu	2026-06-20 16:44:33 (1 hour ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Marc	2026-06-20 14:32:10 (3 hours ago)	67.20.116.98 - - [20/Jun/2026:14:15:25 +0200] "GET /wp-login.php HTTP/2.0" 200 3469 "-" "Mozilla/5.0 ... show more 67.20.116.98 - - [20/Jun/2026:14:15:25 +0200] "GET /wp-login.php HTTP/2.0" 200 3469 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 67.20.116.98 - - [20/Jun/2026:14:15:27 +0200] "POST /wp-login.php HTTP/2.0" 403 10722 "https://kurse.tortenatelier-schwanbeck.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 67.20.116.98 - - [20/Jun/2026:15:50:11 +0200] "GET /wp-login.php HTTP/2.0" 200 3469 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 67.20.116.98 - - [20/Jun/2026:15:50:12 +0200] "POST /wp-login.php HTTP/2.0" 403 10713 "https://kurse.tortenatelier-schwanbeck.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 67.20.116.98 - - [20/Jun/2026:16:32:08 +0200] "GET /wp-login.php HTTP/2.0" 200 4082 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Brute-Force Web App Attack
Anonymous	2026-06-20 05:46:44 (12 hours ago)	Failed Wordpress Logins	Web App Attack
🇨🇦 KIsmay	2026-06-20 04:05:47 (13 hours ago)	Jun 19 22:40:41 www4 WPAudit[2541144]: 67.20.116.98 www.amandasrestaurant.ca "Mozilla/5.0 (Windows N ... show more Jun 19 22:40:41 www4 WPAudit[2541144]: 67.20.116.98 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" sbd-admin:admin40@ FAIL Jun 19 23:48:34 www4 WPAudit[2542687]: 67.20.116.98 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" servicesfyi:servicesfyi FAIL Jun 19 23:51:06 www4 WPAudit[2546182]: 67.20.116.98 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" imagine:imagine FAIL Jun 20 00:04:58 www4 WPAudit[2547611]: 67.20.116.98 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" katharinedickerson:katharinedickerson FAIL Jun 20 00:05:46 www4 WPAudit[2547739]: 67.20.116.98 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show less	Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-06-20 03:53:22 (14 hours ago)	Attack against WordPress	Web App Attack
🇫🇷 tecnicorioja	2026-06-19 22:00:47 (19 hours ago)	wp-login attack [19/Jun/2026:16:28:48	Brute-Force Web App Attack
🇲🇹 Malta	2026-06-19 11:52:39 (1 day ago)	67.20.116.98 - - [19/Jun/2026:13:52:39 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 67.20.116.98 - - [19/Jun/2026:13:52:39 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 nyt	2026-06-19 08:54:47 (1 day ago)	Repeated WordPress login POSTs blocked by WAF (3 in 6h)	Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-06-19 08:02:58 (1 day ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 67.20.116.98 - - [19/Jun/2026:09:02:52 +0100] PO ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 67.20.116.98 - - [19/Jun/2026:09:02:52 +0100] POST /wp-login.php HTTP/2.0 200 3848 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇬🇧 spamverify.com	2026-06-19 07:49:35 (1 day ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 omc	2026-06-19 07:38:06 (1 day ago)	AH01797: Unauthorized file	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-06-19 03:32:26 (1 day ago)	67.20.116.98 - - [19/Jun/2026:05:30:41 +0200] "POST /wp-login.php HTTP/1.1" 200 7270 "https://www.st ... show more 67.20.116.98 - - [19/Jun/2026:05:30:41 +0200] "POST /wp-login.php HTTP/1.1" 200 7270 "https://www.staging.die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67.20.116.98 - - [19/Jun/2026:05:31:27 +0200] "POST /wp-login.php HTTP/1.1" 200 15718 "https://wp4dich.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67.20.116.98 - - [19/Jun/2026:05:32:25 +0200] "POST /wp-login.php HTTP/1.1" 200 16949 "https://www.tierarzt-gellrich.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇳🇱 tmiland	2026-06-19 02:39:37 (1 day ago)	(wordpress_login) WordPress Login Attack 67.20.116.98 (US/United States/host2125.hostmonster.com): 3 ... show more (wordpress_login) WordPress Login Attack 67.20.116.98 (US/United States/host2125.hostmonster.com): 3 in the last 3600 secs; IP: 67.20.116.98; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 67.20.116.98 - - [19/Jun/2026:04:33:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67.20.116.98 - - [19/Jun/2026:04:33:36 +0200] "POST /wp-login.php HTTP/1.1" 200 2068 "https://.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67.20.116.98 - - [19/Jun/2026:04:39:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
🇪🇸 librebit	2026-06-19 01:47:37 (1 day ago)	Brute force	Brute-Force

Showing 1 to 15 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.20

🇲🇽 195.250.28.89

🇧🇬 91.148.190.150

🇨🇳 58.19.76.68

🇫🇷 51.178.111.226

🇳🇱 45.148.10.152

🇺🇸 44.160.38.166

🇬🇧 31.3.241.131

🇮🇹 151.75.25.169

🇨🇳 121.196.157.119

🇸🇪 104.23.223.12

🇺🇸 66.132.186.229

🇨🇳 60.214.154.254

🇺🇸 44.180.200.71

🇨🇳 36.133.36.177

🇬🇧 35.203.210.109

🇮🇷 31.14.84.23

🇩🇪 192.109.200.78

🇩🇪 172.217.33.149

🇺🇸 135.237.127.94