198.54.117.198
Classification: Whitelisted
198.54.117.198 is a whitelisted (trusted) IP address. Reported by 17 threat sources, last seen 2026-07-25. Network: AS22612 Namecheap, Inc..
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-07-25 09:15:38 | 2026-07-25 09:15:38 | benign hosting | |
| Mail Spammer | Barracuda | 2024-11-27 11:01:22 | 2026-07-25 09:15:37 | attacker malicious-activity | |
| virut | Maltiverse Research Team | 2018-11-10 01:50:14 | 2021-04-29 00:51:44 | malicious-activity | |
| Phishing site | Hybrid-Analysis | 2018-12-03 20:30:06 | 2021-04-27 07:00:17 | ||
| Gen:Trojan.Heur.JP | Hybrid-Analysis | 2021-04-24 17:08:02 | 2021-04-24 17:08:02 | ||
| FileRepMetagen [Malware] | Hybrid-Analysis | 2021-04-22 14:51:47 | 2021-04-22 14:51:47 | ||
| Generic.Malware | Hybrid-Analysis | 2018-11-12 01:45:05 | 2021-04-15 00:06:04 | ||
| eBay phishing | Antiphishing.com.ar | 2019-12-03 01:48:11 | 2021-04-14 18:26:45 | ||
| Social Engineering | Antiphishing.com.ar | 2020-01-24 01:24:31 | 2021-04-14 18:26:45 | malicious-activity | |
| Phishing Internal Revenue Service | Phishtank | 2020-11-22 19:28:49 | 2021-03-15 20:20:09 | compromised malicious-activity | |
| Social Engineering | Phishtank | 2020-07-07 04:32:12 | 2021-03-15 20:20:09 | malicious-activity | |
| Malicious site | Hybrid-Analysis | 2018-12-05 12:00:12 | 2021-03-15 16:00:18 | ||
| Phishing | Maltiverse | 2020-11-16 16:22:01 | 2021-03-11 12:48:17 | compromised | |
| Social Engineering | Maltiverse | 2020-11-16 16:22:01 | 2021-03-11 12:48:17 | malicious-activity | |
| Credit Agricole phishing | Antiphishing.com.ar | 2021-03-11 11:59:23 | 2021-03-11 11:59:23 | ||
| Phishing | Phishtank | 2018-11-09 08:25:30 | 2021-03-08 21:23:10 | compromised malicious-activity | |
| DHL phishing | Antiphishing.com.ar | 2021-01-07 17:23:25 | 2021-03-05 13:48:42 | ||
| Malicious url | Cyber Threat Coalition | 2020-12-14 15:37:39 | 2021-03-04 19:45:53 | malicious-activity | |
| Social Engineering | Cyber Threat Coalition | 2020-11-21 08:08:02 | 2021-03-04 08:55:45 | malicious-activity | |
| Malicious Hostname | Cyber Threat Coalition | 2020-12-14 04:12:40 | 2021-03-04 00:58:41 | malicious-activity | |
| Trojan.Generic | Hybrid-Analysis | 2019-09-10 14:30:25 | 2021-03-03 16:30:41 | ||
| Covid19 scam | CCN-CERT | 2020-04-13 22:12:59 | 2021-03-03 09:33:34 | malicious-activity | |
| Phishing Caixa | Phishtank | 2021-02-05 20:20:25 | 2021-03-03 02:54:31 | compromised malicious-activity | |
| Phishing Lloyds Bank | Phishtank | 2020-09-01 20:26:02 | 2021-03-03 02:43:19 | compromised malicious-activity | |
| Phishing Her Majesty's Revenue and Customs | Phishtank | 2021-01-05 02:46:41 | 2021-03-03 02:21:44 | compromised malicious-activity | |
| AT&T phishing | Antiphishing.com.ar | 2021-01-01 07:03:47 | 2021-02-25 07:56:08 | ||
| Phishing | Mr.Looquer | 2019-08-14 02:15:36 | 2021-02-18 21:29:47 | ||
| suppobox | Maltiverse Research Team | 2018-11-08 01:39:47 | 2021-02-18 01:03:30 | malicious-activity | |
| Phishing Bradesco | Phishtank | 2021-02-15 02:37:38 | 2021-02-15 02:37:38 | compromised malicious-activity | |
| Phishing eBay, Inc. | Phishtank | 2019-02-16 08:54:30 | 2021-02-13 13:46:49 | compromised malicious-activity | |
| Malicious Host | HoneyDB | 2021-02-12 00:00:00 | 2021-02-12 00:00:00 | malicious-activity | |
| Phishing Netflix | Phishtank | 2021-01-02 21:26:29 | 2021-01-31 11:44:16 | compromised malicious-activity | |
| Phishing NatWest Bank | Phishtank | 2021-01-15 08:33:53 | 2021-01-31 11:43:07 | compromised malicious-activity | |
| Phishing EE | Phishtank | 2021-01-02 21:30:07 | 2021-01-31 11:39:11 | compromised malicious-activity | |
| Phishing TSB | Phishtank | 2021-01-25 08:34:20 | 2021-01-31 11:37:09 | compromised malicious-activity | |
| Kryptik.imbgc | Hybrid-Analysis | 2021-01-22 07:00:24 | 2021-01-22 07:00:24 | ||
| Apple phishing | Antiphishing.com.ar | 2021-01-15 09:31:33 | 2021-01-15 09:31:33 | ||
| Deutsche Post phishing | Antiphishing.com.ar | 2021-01-13 04:40:10 | 2021-01-13 04:40:10 | ||
| LLOYDS phishing | Antiphishing.com.ar | 2020-12-22 12:30:38 | 2021-01-13 04:39:32 | ||
| Lloyds Bank phishing | Antiphishing.com.ar | 2020-12-22 12:30:52 | 2021-01-12 13:33:55 | ||
| O2online(telefonica) phishing | Antiphishing.com.ar | 2021-01-11 04:36:58 | 2021-01-11 04:36:58 | ||
| Phishing Halifax | Phishtank | 2020-11-22 19:28:13 | 2021-01-07 16:29:34 | compromised malicious-activity | |
| Probably Heur.HTMLUnescapeD | Hybrid-Analysis | 2021-01-04 17:45:15 | 2021-01-04 17:45:17 | ||
| Malware distribution site | VxVault | 2020-12-18 05:53:58 | 2020-12-28 10:53:54 | malicious-activity | |
| paypal phishing | Antiphishing.com.ar | 2020-04-28 02:49:39 | 2020-12-25 12:58:42 | ||
| Covid19 scam | Cyber Threat Coalition | 2020-04-16 11:28:26 | 2020-12-14 02:50:37 | malicious-activity | |
| Phishing Banco Santander, S.A. | Phishtank | 2020-11-30 14:23:33 | 2020-12-02 13:57:10 | compromised malicious-activity | |
| Phishing HSBC Group | Phishtank | 2020-11-22 13:37:18 | 2020-11-23 15:29:33 | compromised malicious-activity | |
| Other phishing | Antiphishing.com.ar | 2020-11-12 03:15:27 | 2020-11-12 03:15:27 | ||
| Malware site | Hybrid-Analysis | 2018-12-21 15:45:05 | 2020-11-09 21:30:04 | ||
| Gen:Variant.Adware.Kazy | Hybrid-Analysis | 2020-10-23 16:45:12 | 2020-10-23 16:45:12 | ||
| Phishing Lloyds TSB Group | OpenPhish | 2020-10-20 04:05:21 | 2020-10-20 04:05:21 | ||
| Social Engineering | OpenPhish | 2019-07-09 02:47:17 | 2020-10-20 04:05:21 | malicious-activity | |
| Phishing Three UK | OpenPhish | 2020-10-12 05:54:30 | 2020-10-15 06:03:39 | ||
| Phishing Halifax Bank of Scotland Plc | OpenPhish | 2020-10-14 05:56:24 | 2020-10-14 05:56:24 | ||
| HEUR:Trojan.MSIL.DOTHETUK | Hybrid-Analysis | 2020-10-05 19:00:18 | 2020-10-05 19:00:20 | ||
| apple phishing | Antiphishing.com.ar | 2020-01-24 01:24:31 | 2020-09-28 11:21:17 | ||
| Rakuten phishing | Antiphishing.com.ar | 2020-09-27 04:45:31 | 2020-09-27 04:45:31 | ||
| mirai | Maltiverse Research Team | 2018-12-01 01:28:21 | 2020-09-24 01:30:32 | ||
| Phishing Generic/Spear Phishing | OpenPhish | 2020-09-23 05:36:35 | 2020-09-23 05:36:35 | ||
| uber phishing | Antiphishing.com.ar | 2019-09-24 08:00:36 | 2020-08-06 03:33:52 | ||
| Covid19 scam | DomainTools | 2020-04-26 10:16:05 | 2020-08-05 02:20:01 | malicious-activity | |
| Gen:Variant.Graftor | Hybrid-Analysis | 2020-07-27 06:00:21 | 2020-07-27 06:00:21 | ||
| Heur.BZC.YAX.Nioc.1 | Hybrid-Analysis | 2020-07-08 21:30:06 | 2020-07-08 21:30:07 | ||
| Trojan.VBS | Hybrid-Analysis | 2020-07-07 17:15:11 | 2020-07-07 17:15:11 | ||
| Phishing Three | Phishtank | 2020-04-01 02:53:49 | 2020-07-07 04:32:40 | ||
| emotet | Maltiverse Research Team | 2020-04-08 06:39:51 | 2020-07-01 06:02:47 | S0367 Emotet | |
| Malicious URL | Maltiverse Research Team | 2020-06-29 20:46:07 | 2020-06-29 20:46:07 | ||
| Social Engineering | Maltiverse Research Team | 2020-06-29 20:46:07 | 2020-06-29 20:46:07 | malicious-activity | |
| VBS.ObfDldr.14 | Hybrid-Analysis | 2020-06-29 13:00:41 | 2020-06-29 13:00:41 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2020-05-28 01:45:10 | 2020-05-28 01:45:10 | ||
| Malicious domain | Telefonica Peru | 2020-04-09 04:50:23 | 2020-04-09 04:50:23 | ||
| Phishing Standard Bank of South Africa | OpenPhish | 2020-04-09 02:18:43 | 2020-04-09 02:18:43 | ||
| Adware.PCKeeper | Hybrid-Analysis | 2020-04-07 09:15:15 | 2020-04-07 09:15:15 | ||
| TrojanSpy.LOKI.SMDF | Hybrid-Analysis | 2020-03-26 12:00:24 | 2020-03-26 12:00:24 | ||
| target unspecified phishing | Antiphishing.com.ar | 2020-03-17 01:53:03 | 2020-03-17 01:53:03 | ||
| Generic.Malware.dld | Hybrid-Analysis | 2020-03-12 02:30:05 | 2020-03-12 02:30:05 | ||
| DeepScan:Generic.Ransom.Sodinokibi | Hybrid-Analysis | 2020-02-19 20:15:12 | 2020-03-09 13:00:54 | ||
| linkedin phishing | Antiphishing.com.ar | 2020-02-29 01:46:35 | 2020-02-29 01:46:35 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2020-02-10 06:30:12 | 2020-02-10 06:30:12 | ||
| TSPY_HPLOKI.SMBD | Hybrid-Analysis | 2020-01-06 13:45:19 | 2020-01-06 13:45:19 | ||
| Web | Mr.Looquer | 2019-07-23 02:54:10 | 2020-01-06 02:18:58 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2019-11-15 10:15:27 | 2019-11-15 10:15:28 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2019-10-03 18:15:46 | 2019-10-03 18:15:46 | ||
| apt | Maltiverse Research Team | 2019-10-02 17:57:55 | 2019-10-02 17:59:11 | ||
| Bolik.2 | Hybrid-Analysis | 2019-09-16 10:15:04 | 2019-09-16 10:15:04 | ||
| malicious.moderate.ml | Hybrid-Analysis | 2019-09-09 05:15:11 | 2019-09-09 05:15:11 | ||
| Pharmacy | Mr.Looquer | 2019-08-20 01:58:37 | 2019-08-20 01:58:37 | ||
| Trojan.Agent | Hybrid-Analysis | 2019-08-11 21:00:16 | 2019-08-11 21:00:19 | ||
| Phishing eBay Inc. | OpenPhish | 2019-07-09 02:47:17 | 2019-07-09 02:47:17 | ||
| Malware Download | Abuse.ch | 2019-04-18 06:29:51 | 2019-04-18 06:29:51 | ||
| CVE-2012-0158 | Hybrid-Analysis | 2019-03-29 11:45:16 | 2019-03-29 11:45:16 | ||
| Malicious Host | APT Notes | 2019-01-12 08:31:36 | 2019-01-12 08:43:36 | ||
| Botnet Command and Control Server | IBM X-Force Exchange | 2018-12-24 03:15:00 | 2018-12-24 03:15:00 | ||
| Dynamic IPs | IBM X-Force Exchange | 2015-03-02 22:02:00 | 2015-03-02 22:02:00 |
Tags
c&c c2 dga phishing https://www.threatminer.org/report.php?q=apt-c-23 iocs_0-symantec.pdf&y=2018 https://www.threatminer.org/report.php?q=oceanlotus_ new watering hole attack in southeast asia.pdf&y=2018 https://www.threatminer.org/report.php?q=new threat actor group darkhydrus targets middle east government - palo alto networks blog.pdf&y=2018 doc sector:e-commerce ebay inc. fraud coinminer blackmarket apt sector:financial standard bank of south africa covid19 coronavirus scam generic/spear phishing sector:telecommunications three uk halifax bank of scotland plc lloyds tsb group malwareWhois information
- AS name
- AS22612 Namecheap, Inc.
- AS registry
- arin
- AS date
- 2015-11-13 00:00:00
- AS CIDR
- 198.54.117.0/24
- CIDR
- 198.54.112.0/20
- Registrant
- Namecheap, Inc.
- Address
- 11400 W. Olympic Blvd. Suite 200
- City
- Atlanta
- State
- GA
- Postal code
- 30303
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2018-11-08 01:39:47
- Last updated
- 2026-07-25 09:15:38