JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.92.145.142

Neutral Activity

Abuse Confidence Score

0% Low Risk

21 reports

14 reporters · latest 2 months ago

ISP: SkyNet Multi Services (Pvt) Ltd.
Usage Type: Unknown
ASN: AS152605
Domain Name: snms.net.pk
Country: 🇵🇰 Pakistan
City: Lahore, Punjab

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

111.92.145.142 has been reported 21 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

21 from 14 distinct reporters

First reported

May 1st 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-26 18:42:47 UTC · (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-25 11:49:20 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:49:14.420269 2026] [security2:error] [pid 18462:tid 18462] [client 111.92.145.142:58358] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:49:14.420269 2026] [security2:error] [pid 18462:tid 18462] [client 111.92.145.142:58358] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|guarinofurnituredesigns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guarinofurnituredesigns.com"] [uri "/xmlrpc.php"] [unique_id "ao2BOlKbGmZsJ_HNf6SuawAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-08-25 11:49:12 UTC · (2 months ago)	(wordpress) Failed wordpress login from 111.92.145.142 (PK/Pakistan/-)	Brute-Force
🇳🇱 ConsulHosting	2026-08-25 11:06:40 UTC · (2 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 yitzhaq	2026-08-25 10:36:32 UTC · (2 months ago)	111.92.145.142 - - [25/Aug/2026:12:35:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "Jetpack/12.5; WordPress/6.3; http://site54725893.com" 111.92.145.142 - - [25/Aug/2026:12:35:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "Jetpack by WordP ... show more 111.92.145.142 - - [25/Aug/2026:12:35:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "Jetpack/12.5; WordPress/6.3; http://site54725893.com" 111.92.145.142 - - [25/Aug/2026:12:35:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "Jetpack by WordPress.com" 111.92.145.142 - - [25/Aug/2026:12:36:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4387 "-" "WordPress.com; https://wordpress.com" 111.92.145.142 - - [25/Aug/2026:12:36:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4388 "-" "Jetpack by WordPress.com" 111.92.145.142 - - [25/Aug/2026:12:36:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4387 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-08-25 10:18:21 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 06:18:15.835079 2026] [security2:error] [pid 24767:tid 24767] [client 111.92.145.142:58558] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 06:18:15.835079 2026] [security2:error] [pid 24767:tid 24767] [client 111.92.145.142:58558] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|fgrotary.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fgrotary.org"] [uri "/xmlrpc.php"] [unique_id "ao1r56VeIbM1qxC9L6UUgAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 09:47:09 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:47:02.967567 2026] [security2:error] [pid 15273:tid 15273] [client 111.92.145.142:58409] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:47:02.967567 2026] [security2:error] [pid 15273:tid 15273] [client 111.92.145.142:58409] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|dancingbearprinting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dancingbearprinting.com"] [uri "/xmlrpc.php"] [unique_id "ao1kluQo4GvlSq0e8sBl6gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 09:17:31 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:17:25.104482 2026] [security2:error] [pid 7806:tid 7806] [client 111.92.145.142:58277] M ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:17:25.104482 2026] [security2:error] [pid 7806:tid 7806] [client 111.92.145.142:58277] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|gulftelecom.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gulftelecom.com"] [uri "/xmlrpc.php"] [unique_id "ao1dpTiEAEkn3nybMRX4owAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 19:39:38 UTC · (3 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 15:39:33.992352 2026] [security2:error] [pid 27512:tid 27512] [client 111.92.145.142:60374] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 15:39:33.992352 2026] [security2:error] [pid 27512:tid 27512] [client 111.92.145.142:60374] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|brushmileage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brushmileage.org"] [uri "/xmlrpc.php"] [unique_id "alaQdWKcl9IufjKvREWNogAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-14 19:30:35 UTC · (3 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-07-14 19:08:34 UTC · (3 months ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 19:15:57 UTC · (4 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:15:52.568902 2026] [security2:error] [pid 20585:tid 20585] [client 111.92.145.142:37394] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:15:52.568902 2026] [security2:error] [pid 20585:tid 20585] [client 111.92.145.142:37394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.142 (+1 hits since last alert)\|ritterlien.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ritterlien.com"] [uri "/xmlrpc.php"] [unique_id "ai796OaRV0vpEC5ySAsmrAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 18:42:19 UTC · (4 months ago)	[redacted] 111.92.145.142 - - [14/Jun/2026:20:41:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.142 - - [14/Jun/2026:20:41:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.co ... show more [redacted] 111.92.145.142 - - [14/Jun/2026:20:41:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.142 - - [14/Jun/2026:20:41:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.142 - - [14/Jun/2026:20:41:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 111.92.145.142 - - [14/Jun/2026:20:42:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site52509772.com" [redacted] 111.92.145.142 - - [14/Jun/2026:20:42:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
Anonymous	2026-06-14 18:41:10 UTC · (4 months ago)	Attac	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-14 17:39:54 UTC · (4 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 186.82.100.30

🇨🇴 181.236.161.82

🇺🇸 181.215.65.174

🇰🇷 169.211.232.182

🇺🇸 156.235.89.153

🇨🇳 115.190.151.242

🇳🇱 109.160.32.135

🇺🇸 100.62.110.78

🇧🇬 78.128.112.6

🇷🇺 195.20.119.51

🇧🇷 177.1.88.85

🇸🇬 164.52.38.90

🇭🇰 150.241.237.45

🇺🇸 129.121.143.242

🇨🇳 117.50.51.198

🇺🇸 104.28.201.157

🇺🇸 104.28.201.155

🇺🇸 104.28.163.142

🇬🇧 87.236.176.10

🇧🇬 79.124.56.230