92.113.149.27

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
38 reports
32 reporters · latest 1 year ago
ISP
JSC Ukrtelecom
Usage Type
Data Center/Web Hosting/Transit
ASN
AS44803
Domain Name
ukrtelecom.ua
Country
🇩🇰 Denmark
City
Copenhagen, Capital Region
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

92.113.149.27 has been reported 38 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
38 from 32 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 tecnicorioja
POST /xmlrpc.php [16/Sep/2025:06:04:41
Brute-Force Web App Attack
🇪🇸 masterguru
(xmlrpc) Failed xmlrpc access from 92.113.149.27 (DK/Denmark/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪 LRob
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot Web App Attack
🇨🇿 huginet
DDoS Attack FTP Brute-Force Ping of Death Phishing Web Spam Blog Spam Spoofing Brute-Force Web App Attack SSH
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]
Bad Web Bot Web App Attack
🇺🇸 octageeks.com
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
Anonymous
WordPress Brute Force
Brute-Force
Anonymous
XMLRPC Hack Attempts
Hacking Brute-Force
🇮🇪 Jim Keir
2025-09-16 03:29:47 92.113.149.27 File scanning, blocking 92.113.149.27 for 5 minutes
Web App Attack
🇫🇮 mnazibo
Brute-Force Bad Web Bot
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Brute-Force Bad Web Bot Web App Attack
🇺🇸 [email protected]
Fail2Ban jail apache-json-scanners detected activity on 2025-09-15T17:46:59Z
Brute-Force
🇩🇪 psauxit
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
Hacking Web App Attack
🇨🇦 polycoda
🔑 Wordpress login brute force attempt
Hacking Web App Attack
🇺🇸 myagent.site
Blocked user enumeration attempt
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.143.107.34
🇺🇸 173.17.162.121
🇮🇳 152.70.75.102
🇲🇷 102.216.219.24
🇭🇰 101.36.119.203
🇱🇹 78.57.92.2
🇷🇺 46.146.227.191
🇬🇧 216.226.76.120
🇸🇦 188.248.70.212
🇮🇳 117.242.250.144
🇺🇸 107.150.105.153
🇺🇸 104.28.166.213
🇨🇳 101.126.4.215
🇺🇸 34.19.118.192
🇺🇸 216.25.89.134
🇫🇷 185.194.178.92
🇦🇷 181.45.135.118
🇨🇳 175.148.24.110
🇺🇸 162.216.150.149
🇺🇸 158.94.187.111
feedback