JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.81.131.92

94.81.131.92 was found in our database!

This IP was reported 293 times. Confidence of Abuse is 0%: ?

ISP	Telecom Italia S.p.A.
Usage Type	Fixed Line ISP
ASN	AS3269
Hostname(s)	host-94-81-131-92.business.telecomitalia.it
Domain Name	telecomitalia.com
Country	🇮🇹 Italy
City	Turin, Piedmont

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.81.131.92

Whois 94.81.131.92

IP Abuse Reports for 94.81.131.92:

This IP address has been reported a total of 293 times from 126 distinct sources. 94.81.131.92 was first reported on October 31st 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-01-03 07:07:24 (5 months ago)	Attempted access to sensitive endpoint (/wp-content/403.php) detected. Automated scan or unauthorize ... show more Attempted access to sensitive endpoint (/wp-content/403.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 jsopn	2025-08-25 06:35:39 (9 months ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "public" at 2025-08-25T06:35:34Z	Brute-Force SSH
🇫🇷 UM3	2025-08-20 06:56:06 (9 months ago)	Exim Auth Failed	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-19 20:08:20 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-18 20:08:18 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SocGholish	2025-08-18 06:28:51 (9 months ago)	SSH honeypot detection: 1 login attempt from 94.81.131.92 using credentials 'default:default66'	Port Scan Brute-Force SSH
🇮🇳 Parth Maniar	2025-08-09 07:49:26 (10 months ago)	This IP address carried out 4 port scanning attempts on 08-08-2025. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 08-08-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇨🇳 ThreatBook.io	2025-08-08 22:20:57 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.81.131.92	SSH
🇮🇳 Parth Maniar	2025-08-08 17:21:09 (10 months ago)	This IP address carried out 2 port scanning attempts on 07-08-2025. For more information or to repor ... show more This IP address carried out 2 port scanning attempts on 07-08-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇨🇳 ThreatBook.io	2025-08-06 22:19:18 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.81.131.92	SSH
🇸🇰 KlinikaMD	2025-08-04 16:56:13 (10 months ago)	Automatic report from KMD firewall log.	Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-08-01 22:18:24 (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.81.131.92	SSH
🇺🇸 anon333	2025-07-30 10:37:29 (10 months ago)	Hacker syslog review 1753871849	Hacking
🇺🇸 bigscoots.com	2025-07-30 06:48:47 (10 months ago)	94.81.131.92 (IT/Italy/host-94-81-131-92.business.telecomitalia.it), 5 distributed sshd attacks on a ... show more 94.81.131.92 (IT/Italy/host-94-81-131-92.business.telecomitalia.it), 5 distributed sshd attacks on account [support] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 30 01:26:49 15002 sshd[23647]: Invalid user support from 94.81.131.92 port 51419 Jul 30 01:26:51 15002 sshd[23647]: Failed password for invalid user support from 94.81.131.92 port 51419 ssh2 Jul 30 01:48:26 15002 sshd[25281]: Invalid user support from 125.25.183.157 port 41819 Jul 30 01:27:17 15002 sshd[23653]: Invalid user support from 223.70.230.130 port 45704 Jul 30 01:27:19 15002 sshd[23653]: Failed password for invalid user support from 223.70.230.130 port 45704 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-07-30 06:24:27 (10 months ago)	94.81.131.92 (IT/Italy/host-94-81-131-92.business.telecomitalia.it), 5 distributed sshd attacks on a ... show more 94.81.131.92 (IT/Italy/host-94-81-131-92.business.telecomitalia.it), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 30 01:24:02 12824 sshd[5477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.81.131.92 user=root Jul 30 01:24:04 12824 sshd[5477]: Failed password for root from 94.81.131.92 port 45911 ssh2 Jul 30 00:48:30 12824 sshd[27389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.176.55.32 user=root Jul 30 00:48:32 12824 sshd[27389]: Failed password for root from 116.176.55.32 port 2828 ssh2 Jul 30 01:24:09 12824 sshd[5691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.124.152.216 user=root IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 293 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:c300:400::1f2

🇧🇷 205.210.31.181

🇧🇷 200.225.113.212

🇲🇽 187.191.48.24

🇲🇽 187.191.48.5

🇺🇸 155.248.213.21

🇯🇵 140.227.120.36

🇨🇦 138.197.152.254

🇻🇳 103.161.170.12

🇺🇸 38.59.242.211

🇺🇸 35.238.112.238

🇺🇸 2001:49d0:3403:2:9999::227

🇧🇷 186.238.247.238

🇳🇱 185.93.89.147

🇫🇮 178.20.210.208

🇻🇳 118.69.37.51

🇮🇳 103.21.55.206

🇺🇸 20.12.41.6

🇰🇷 14.49.157.155

🇰🇷 222.232.176.7