JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.92.145.164

Neutral Activity

Abuse Confidence Score

0% Low Risk

18 reports

15 reporters · latest 2 months ago

ISP: SkyNet Multi Services (Pvt) Ltd.
Usage Type: Unknown
ASN: AS152605
Domain Name: snms.net.pk
Country: 🇵🇰 Pakistan
City: Lahore, Punjab

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

111.92.145.164 has been reported 18 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

18 from 15 distinct reporters

First reported

May 31st 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-08-26 18:48:23 UTC · (2 months ago)		Web App Attack
Anonymous	2026-08-26 17:45:43 UTC · (2 months ago)	[redacted] 111.92.145.164 - - [26/Aug/2026:19:45:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 41 ... show more [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.2; http://site83991224.com" [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 111.92.145.164 - - [26/Aug/2026:19:45:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.2; http://site47514480.com" ... show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-08-26 16:50:32 UTC · (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-26 16:45:13 UTC · (2 months ago)	(wordpress) Failed wordpress login from 111.92.145.164 (PK/Pakistan/Sindh/Karachi/-)	Brute-Force
🇩🇪 akasolutions.de	2026-08-26 13:14:37 UTC · (2 months ago)	(wordpress) Failed wordpress login from 111.92.145.164 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-20 12:04:32 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 08:04:24.884201 2026] [security2:error] [pid 16356:tid 16356] [client 111.92.145.164:39015] ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 08:04:24.884201 2026] [security2:error] [pid 16356:tid 16356] [client 111.92.145.164:39015] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.164 (+1 hits since last alert)\|gellertdealers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gellertdealers.com"] [uri "/xmlrpc.php"] [unique_id "aobtSE6Japu6xcY0EHD63gAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-05-31 09:47:15 UTC · (5 months ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-05-31 09:13:51 UTC · (5 months ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=crisis-management2018.eu; logs=/var/log/httpd/domains/crisis-management2018.eu.log; samples=/xmlrpc.php	Brute-Force Web App Attack
🇩🇪 lenz	2026-05-31 08:43:36 UTC · (5 months ago)	May 31 10:42:53 hosting wordpress(grupa-ddd.pl)[1201]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:03 hosting wordpress(grupa-ddd.pl)[11820]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:14 h ... show more May 31 10:42:53 hosting wordpress(grupa-ddd.pl)[1201]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:03 hosting wordpress(grupa-ddd.pl)[11820]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:14 hosting wordpress(grupa-ddd.pl)[1203]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:24 hosting wordpress(grupa-ddd.pl)[2270]: XML-RPC authentication failure for admin from 111.92.145.164 May 31 10:43:35 hosting wordpress(grupa-ddd.pl)[1200]: XML-RPC authentication failure for admin from 111.92.145.164 ... show less	Brute-Force Web App Attack
🇩🇪 konseptit	2026-05-31 07:57:49 UTC · (5 months ago)	(wordpress) Failed wordpress login from 111.92.145.164 (PK/Pakistan/-)	Brute-Force
🇫🇷 masterguru	2026-05-31 07:35:26 UTC · (5 months ago)	(xmlrpc) Apache: Failed xmlrpc access from 111.92.145.164 (PK/Pakistan/-): 10 in the last 3600 secs (0-201)	Hacking
🇫🇷 Kenshin869	2026-05-31 07:06:23 UTC · (5 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-05-31 06:58:21 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 111.92.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 02:58:12.105766 2026] [security2:error] [pid 5962:tid 5962] [client 111.92.145.164:30859] M ... show more (mod_security) mod_security (id:240335) triggered by 111.92.145.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 02:58:12.105766 2026] [security2:error] [pid 5962:tid 5962] [client 111.92.145.164:30859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 111.92.145.164 (+1 hits since last alert)\|kildarafarms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kildarafarms.com"] [uri "/xmlrpc.php"] [unique_id "ahvcBAGnFy2kQ1IULy3_dQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-05-31 06:49:08 UTC · (5 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-05-31 06:45:04 UTC · (5 months ago)	[redacted] 111.92.145.164 - - [31/May/2026:08:44:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.164 - - [31/May/2026:08:44:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.co ... show more [redacted] 111.92.145.164 - - [31/May/2026:08:44:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.164 - - [31/May/2026:08:44:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 111.92.145.164 - - [31/May/2026:08:44:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 111.92.145.164 - - [31/May/2026:08:44:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 111.92.145.164 - - [31/May/2026:08:45:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" ... show less	Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.113

🇫🇷 185.194.178.66

🇺🇦 176.39.26.44

🇳🇱 77.239.124.39

🇧🇪 198.235.24.173

🇫🇷 194.5.53.34

🇫🇷 194.5.53.27

🇫🇷 194.5.53.25

🇫🇷 194.5.53.24

🇫🇷 194.5.53.17

🇬🇧 193.163.125.190

🇧🇷 186.237.15.148

🇺🇸 185.77.222.253

🇧🇷 179.153.237.166

🇫🇷 178.77.100.92

🇺🇦 176.37.155.35

🇺🇸 174.76.8.147

🇩🇪 167.94.146.41

🇹🇼 152.32.230.104

🇦🇫 149.54.81.146