JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.111.139.162

192.111.139.162 was found in our database!

This IP was reported 608 times. Confidence of Abuse is 45%: ?

45%

ISP	Performive LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46562
Domain Name	performive.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.111.139.162

Whois 192.111.139.162

IP Abuse Reports for 192.111.139.162:

This IP address has been reported a total of 608 times from 170 distinct sources. 192.111.139.162 was first reported on January 27th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-18 00:57:27 (3 hours ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 192.111.139.162 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 192.111.139.162 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇬🇧 PeravixGroup	2026-06-08 10:19:51 (1 week ago)	Honeypot detection: Cryptocurrency mining pool login / XMRig botnet probe on port 5900. Severity: ME ... show more Honeypot detection: Cryptocurrency mining pool login / XMRig botnet probe on port 5900. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇩🇪 BestFans.com	2026-06-08 00:21:28 (1 week ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇩🇪 Justin F. \| AS204464	2026-06-06 17:46:39 (1 week ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credentials: 90aca5577806:, 67 ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credentials: 90aca5577806:, 67cef6c6b07a:, 2b071932c964:, 32446e3b7634:, 58d68aab341d:, 7e2b3967ceef:, 7e030a00ac2e:, e543bd553d4f:, 03602e203f7e:, 8647b824c952: • Number of login attempts: 10 • Client: SSH-2.0-Go Reported by: Justin F. show less	Brute-Force SSH
🇩🇪 Roper123	2026-06-05 12:57:08 (1 week ago)	Web exploits	Web App Attack
🇩🇪 BestFans.com	2026-05-22 14:18:19 (3 weeks ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇸 dtorrer	2026-05-21 08:20:36 (3 weeks ago)	Client attempted to submit spam on a website post.	Blog Spam
🇺🇸 xmission.com	2026-05-17 07:45:19 (1 month ago)	Blocked by UFW (TCP on 9101) Source port: 38844 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 38844 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 192.111.139.162) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-14 12:29:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 192.111.139.162 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 192.111.139.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 08:28:55.204160 2026] [security2:error] [pid 30543:tid 30543] [client 192.111.139.162:45851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bernardo.gonzalez.com"] [uri "/wp-config.php.bak"] [unique_id "agXAB7ISdyzSjrzOA6VqZwAAAA4"], referer: https://www.google.com/search?q=www.bernardo.gonzalez.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-05-11 11:03:34 (1 month ago)	Form spam	Web Spam
🇺🇸 xmission.com	2026-05-09 01:23:19 (1 month ago)	Blocked by UFW (TCP on 9101) Source port: 39246 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 39246 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 192.111.139.162) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cheatmaster.store	2026-05-08 11:34:51 (1 month ago)	Proxy parsed from 192.111.139.162:4145	Brute-Force SSH
🇸🇮 administrator	2026-05-04 17:00:40 (1 month ago)	2026-04-10 02:08:05,365 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 192.111.139.162 ... show more 2026-04-10 02:08:05,365 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 192.111.139.162 2026-04-10 02:08:05,365 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 192.111.139.162 2026-04-10 02:08:05,365 fail2ban.actions [1026]: NOTICE [ninjafirewall] Ban 192.111.139.162 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇩🇪 Justin F. \| AS204464	2026-04-26 04:28:02 (1 month ago)	Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 23/TELNET Reported by: Jus ... show more Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 23/TELNET Reported by: Justin F. show less	Hacking Port Scan
🇩🇪 FeG Deutschland	2026-04-21 02:20:44 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack

Showing 1 to 15 of 608 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 203.177.64.130

🇧🇷 189.51.34.253

🇳🇱 185.242.226.126

🇳🇱 185.223.235.22

🇳🇱 172.211.56.214

🇩🇪 161.35.25.211

🇨🇳 139.199.69.67

🇭🇰 118.193.47.212

🇰🇪 105.164.128.57

🇳🇱 91.92.42.243

🇺🇸 75.162.168.55

🇵🇰 72.255.18.249

🇳🇱 45.142.193.125

🇺🇸 34.24.95.104

🇳🇱 206.189.111.233

🇭🇰 199.45.155.79

🇬🇹 190.104.112.78

🇧🇷 189.51.35.103

🇮🇩 182.253.156.173

🇮🇳 182.76.107.16