JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

151.115.164.92

Recent Activity

Abuse confidence score ?

4% Caution

14 reports

13 reporters · latest 2 hours ago

ISP	Milan, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	92-164-115-151.instance.scw.eu
Domain Name	collegiotecniciacciaio.it
Country	🇮🇹 Italy
City	Milan, Lombardy

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 151.115.164.92

Export CSV

This IP address has been reported a total of 14 times from 13 distinct sources. 151.115.164.92 was first reported on June 10th 2026, and the most recent report was 2 hours ago. In the last 60 days, the only reporter location was: Germany with 1 report. The only category in these recent reports was: Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-25 06:24:15 (2 hours ago)	Not following 301 redirects — wasted requests \| method: HEAD \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: HEAD \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0 show less	Bad Web Bot
🇿🇦 conure.sh	2026-07-13 12:02:28 (3 months ago)	csagent: score 19.8: php 404 x6, 404 noise floor x3, php in uploads x1; 1 domain(s) in 0s	Web App Attack
🇮🇩 sockominfo	2026-07-12 19:00:52 (3 months ago)	Zimbra: Login failures from malicious IP: 151.115.164.92. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 151.115.164.92. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-12 18:00:09 (3 months ago)	Zimbra: Login failures from malicious IP: 151.115.164.92. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 151.115.164.92. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 polycoda	2026-07-12 11:51:26 (3 months ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇳🇱 Savvii	2026-07-12 04:36:47 (3 months ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Duggy_Tuxy🧱	2026-07-05 12:09:32 (3 months ago)	[NODE02] Banned by SysWarden Firewall (Jail: L3-PORTSCAN)	Port Scan
Anonymous	2026-06-10 18:25:36 (4 months ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇨🇿 lp	2026-06-10 18:18:56 (4 months ago)	SSH Brute force: 10 attempts were recorded from 151.115.164.92 2026-06-10T20:04:26+02:00 Connection ... show more SSH Brute force: 10 attempts were recorded from 151.115.164.92 2026-06-10T20:04:26+02:00 Connection closed by authenticating user root 151.115.164.92 port 53048 [preauth] 2026-06-10T20:04:31+02:00 Connection closed by authenticating user root 151.115.164.92 port 54102 [preauth] 2026-06-10T20:04:38+02:00 Connection closed by authenticating user root 151.115.164.92 port 54168 [preauth] 2026-06-10T20:04:44+02:00 Connection closed by authenticating user root 151.115.164.92 port 49328 [preauth] 2026-06-10T20:04:49+02:00 Connection closed by authenticating user root 151.115.164.92 port 41702 [preauth] 2026-06-10T20:04:55+02:00 Connection closed by authenticating user root 151.115.164.92 port 41704 [preauth] 2026-06-10T20:05:01+02:00 Connection closed by authenticating user root 151.115.164.92 port 38732 [preauth] 2026-06-10T20:05:05+02:00 Invalid user admin from 151.115.164.92 port 38742 2026- show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-06-10 18:14:42 (4 months ago)	2026-06-10T20:14:40.481070+02:00 gw-de15-01.guestgw.net sshd[196752]: Connection closed by 151.115.1 ... show more 2026-06-10T20:14:40.481070+02:00 gw-de15-01.guestgw.net sshd[196752]: Connection closed by 151.115.164.92 port 39404 2026-06-10T20:14:40.679042+02:00 gw-de15-01.guestgw.net sshd[196753]: Connection closed by authenticating user root 151.115.164.92 port 39406 [preauth] 2026-06-10T20:14:40.964606+02:00 gw-de15-01.guestgw.net sshd[196757]: Connection closed by authenticating user root 151.115.164.92 port 39412 [preauth] 2026-06-10T20:14:41.198116+02:00 gw-de15-01.guestgw.net sshd[196763]: Connection closed by authenticating user root 151.115.164.92 port 39428 [preauth] 2026-06-10T20:14:41.484191+02:00 gw-de15-01.guestgw.net sshd[196765]: Connection closed by authenticating user root 151.115.164.92 port 39444 [preauth] show less	Brute-Force
🇬🇧 djboddington	2026-06-10 18:09:21 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force
Anonymous	2026-06-10 18:07:51 (4 months ago)	SSH Brute-Force Attack	Brute-Force SSH
🇵🇱 IROK	2026-06-10 18:05:54 (4 months ago)	2026-06-10T20:05:36.508782 pclab24.pl sshd[574358]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-10T20:05:36.508782 pclab24.pl sshd[574358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.115.164.92 user=root 2026-06-10T20:05:38.338123 pclab24.pl sshd[574358]: Failed password for root from 151.115.164.92 port 44068 ssh2 2026-06-10T20:05:41.188192 pclab24.pl sshd[574376]: Connection from 151.115.164.92 port 49188 on 10.10.0.5 port 22 2026-06-10T20:05:47.773476 pclab24.pl sshd[574376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.115.164.92 user=root 2026-06-10T20:05:50.114461 pclab24.pl sshd[574376]: Failed password for root from 151.115.164.92 port 49188 ssh2 ... show less	SSH
Anonymous	2026-06-10 18:04:55 (4 months ago)	2026-06-10T20:04:33.660181+02:00 doolittle sshd[1464349]: Failed password for [redacted] from 151.11 ... show more 2026-06-10T20:04:33.660181+02:00 doolittle sshd[1464349]: Failed password for [redacted] from 151.115.164.92 port 60252 ssh2 2026-06-10T20:04:41.388856+02:00 doolittle sshd[1464355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.115.164.92 user=[redacted] 2026-06-10T20:04:43.333994+02:00 doolittle sshd[1464355]: Failed password for [redacted] from 151.115.164.92 port 57484 ssh2 2026-06-10T20:04:51.415186+02:00 doolittle sshd[1464363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.115.164.92 user=[redacted] 2026-06-10T20:04:53.731520+02:00 doolittle sshd[1464363]: Failed password for [redacted] from 151.115.164.92 port 36128 ssh2 ... show less	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.247

🇷🇺 94.72.35.226

🇩🇪 51.89.39.53

🇧🇪 34.156.121.182

🇰🇷 222.113.207.183

🇰🇷 220.126.235.123

🇺🇾 201.217.137.194

🇧🇪 198.235.24.159

🇧🇪 198.235.24.147

🇺🇸 161.35.116.46

🇰🇷 118.37.214.187

🇸🇬 43.106.59.108

🇺🇸 20.38.35.135

🇸🇪 213.65.190.48

🇹🇼 198.235.24.121

🇺🇸 172.169.249.152

🇧🇷 138.122.21.19

🇳🇱 109.38.230.48

🇧🇬 78.128.114.170

🇳🇱 77.91.71.92