AbuseIPDB » 164.163.15.22
164.163.15.22 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 48% : ?
ISP
DTEL TELECOM
Usage Type
Fixed Line ISP
ASN
AS263073
Hostname(s)
ip-164.163.15.22.dtel.com.br
Domain Name
dtel.com.br
Country
๐ง๐ท
Brazil
City
Ipojuca, Pernambuco
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 164.163.15.22 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
164.163.15.22 was first reported on
August 27th 2026 , and the most recent report was
8 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฌ๐ง
consul.to
2026-08-28 13:20:51
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
inlink.ltd
2026-08-28 01:54:29
(20 hours ago)
Known malicious PHP file or CMS probe
Web App Attack
Anonymous
2026-08-27 23:31:22
(22 hours ago)
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "M ...
show more
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36"
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.0.0 Safari/537.36"
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36"
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36"
[redacted] 164.163.15.22 - - [28/Aug/2026:01:30:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "
...
show less
Hacking
Web App Attack
๐บ๐ธ
IndigoRidge
2026-08-27 21:13:36
(1 day ago)
164.163.15.22 - - [27/Aug/2026:17:11:23 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 ...
show more
164.163.15.22 - - [27/Aug/2026:17:11:23 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/74.0.0.0 Safari/537.36"
164.163.15.22 - - [27/Aug/2026:17:11:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36"
164.163.15.22 - - [27/Aug/2026:17:12:35 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.0.0 Safari/537.36"
164.163.15.22 - - [27/Aug/2026:17:13:08 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.0.0 Safari/537.36"
164.163.15.22 - - [27/Aug/2026:17:13:35 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/75.0.0.0
...
show less
Web App Attack
๐ฌ๐ท
setupgr
2026-08-27 14:38:26
(1 day ago)
(XMLRPC) WP XMLRPC Attack 164.163.15.22 (BR/Brazil/Pernambuco/Recife/-/[AS263073 DTEL TELECOM]): 1 i ...
show more
(XMLRPC) WP XMLRPC Attack 164.163.15.22 (BR/Brazil/Pernambuco/Recife/-/[AS263073 DTEL TELECOM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 164.163.15.22 - - [27/Aug/2026:17:34:44 +0300] "POST /xmlrpc.php HTTP/1.1" 404 89565 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/83.0.0.0 Safari/537.36"
show less
Port Scan
๐ฎ๐ฉ
Burayot
2026-08-27 10:55:37
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 164.163.15.22 (BR/Brazil/ip-164.163 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 164.163.15.22 (BR/Brazil/ip-164.163.15.22.dtel.com.br): 1 in the last 3600 secs
show less
Web App Attack
๐ฉ๐ช
Hazzard
2026-08-27 09:52:18
(1 day ago)
(wordpress) Failed wordpress login from 164.163.15.22 (BR/Brazil/Pernambuco/Paulista/ip-164.163.15.2 ...
show more
(wordpress) Failed wordpress login from 164.163.15.22 (BR/Brazil/Pernambuco/Paulista/ip-164.163.15.22.dtel.com.br/[redacted]): (CF_ENABLE)
show less
Brute-Force
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: