JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.220.94.157

92.220.94.157 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 100%: ?

100%

ISP	Lyse Tele AS
Usage Type	Fixed Line ISP
ASN	AS29695
Hostname(s)	157.92-220-94.customer.lyse.net
Domain Name	lyse.no
Country	🇳🇴 Norway
City	Sandnes, Rogaland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.220.94.157

Whois 92.220.94.157

IP Abuse Reports for 92.220.94.157:

This IP address has been reported a total of 75 times from 39 distinct sources. 92.220.94.157 was first reported on April 13th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-12 14:18:57 (8 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 abdubhai	2026-07-12 11:44:26 (11 hours ago)	92.220.94.157 - - [12/Jul/2026:1 ...	Brute-Force
🇹🇷 ycoskun41	2026-07-12 10:33:42 (12 hours ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇲🇾 Rizzy	2026-07-11 12:39:15 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-11 12:08:41 (1 day ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)","WordPress.com; https://wordpress.com","Jetpack by WordPress.com (Jetpack 13.0; WordPress 6. show less	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-10 18:00:44 (2 days ago)	92.220.94.157 - - [10/Jul/2026:20:00:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.c ... show more 92.220.94.157 - - [10/Jul/2026:20:00:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" 92.220.94.157 - - [10/Jul/2026:20:00:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 92.220.94.157 - - [10/Jul/2026:20:00:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-10 17:45:14 (2 days ago)	92.220.94.157 - - [10/Jul/2026:19:44:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12. ... show more 92.220.94.157 - - [10/Jul/2026:19:44:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.5; WordPress/6.3; http://site56010460.com" 92.220.94.157 - - [10/Jul/2026:19:45:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" 92.220.94.157 - - [10/Jul/2026:19:45:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.0; WordPress/6.1; http://site99910538.com" show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-07-09 21:52:08 (3 days ago)	Wordfence waf block on flintlocal432	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 10:42:03 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 92.220.94.157 (157.92-220-94.customer.lyse.net) ... show more (mod_security) mod_security (id:240335) triggered by 92.220.94.157 (157.92-220-94.customer.lyse.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:41:56.458079 2026] [security2:error] [pid 32024:tid 32024] [client 92.220.94.157:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.220.94.157 (+1 hits since last alert)\|southernbroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "southernbroadcast.com"] [uri "/xmlrpc.php"] [unique_id "ak969MZNQPYoyzUwf4G4dgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 13:49:42 (4 days ago)	(wordpress) Failed wordpress login from 92.220.94.157 (NO/Norway/Rogaland/Sandnes/157.92-220-94.cust ... show more (wordpress) Failed wordpress login from 92.220.94.157 (NO/Norway/Rogaland/Sandnes/157.92-220-94.customer.lyse.net/[redacted]) show less	Brute-Force
🇫🇮 bittiguru.fi	2026-07-08 13:01:57 (4 days ago)	92.220.94.157 - [08/Jul/2026:16:01:47 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "WordPress.com; ... show more 92.220.94.157 - [08/Jul/2026:16:01:47 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "WordPress.com; https://wordpress.com" "-" 92.220.94.157 - [08/Jul/2026:16:01:57 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" "-" ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-08 12:46:39 (4 days ago)	92.220.94.157 - [08/Jul/2026:15:46:28 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack/12.0; ... show more 92.220.94.157 - [08/Jul/2026:15:46:28 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack/12.0; WordPress/6.1; http://site55574091.com" "-" 92.220.94.157 - [08/Jul/2026:15:46:38 +0300] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Jetpack by WordPress.com" "-" ... show less	Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-07 19:05:50 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-06 19:33:09 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Site.eu	2026-07-06 16:40:16 (6 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.239.51.96

🇷🇸 158.173.240.154

🇻🇳 123.58.198.35

🇨🇳 110.249.201.134

🇲🇲 103.154.241.40

🇻🇳 103.90.227.203

🇨🇳 82.156.168.103

🇫🇷 62.210.38.102

🇱🇹 45.227.254.170

🇨🇳 36.139.229.71

🇸🇬 144.48.6.26

🇨🇳 111.18.51.163

🇹🇷 94.154.43.181

🇹🇿 41.59.31.170

🇸🇬 23.111.14.184

🇺🇸 198.23.254.205

🇳🇱 91.92.40.4

🇺🇸 66.132.172.114

🇸🇬 47.79.201.231

🇸🇬 8.222.243.94