JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.92.198.154

66.92.198.154 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11504
Domain Name	iana.org
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.92.198.154

Whois 66.92.198.154

IP Abuse Reports for 66.92.198.154:

This IP address has been reported a total of 35 times from 27 distinct sources. 66.92.198.154 was first reported on July 24th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (6 hours ago)	Apache probe; attempts=213; exact paths: /.env \| /.env.backup \| /.env.bak \| /.env.dev \| /.env.develo ... show more Apache probe; attempts=213; exact paths: /.env \| /.env.backup \| /.env.bak \| /.env.dev \| /.env.development \| /.env.development.local \| /.env.dist \| /.env.example \| /.env.local \| /.env.old \| /.env.prod \| /.env.production \| /.env.production.local \| /.env.save \| /.env.staging \| /.env.test \| /.vercel/.env.production.local \| /@fs/.env \| /@fs/.env.local \| /actuator \| /actuator/beans \| /actuator/configprops \| /actuator/env \| /actuator/health \| /actuator/heapdump \| /actuator/info \| /actuator/mappings \| /api/.env \| /api/.env.local \| /app/.env \| /app/.env.local \| /backend/.env \| /config/.env \| /data/.env \| /laravel/.env \| /public/.env \| /script/.env \| /server/.env \| /src/.env \| /storage/.env show less	Web App Attack
🇫🇷 Entalpi.net	2026-07-25 20:37:38 (3 days ago)	Repeated requests against sensitive web endpoints	Web App Attack
🇺🇸 uchat-ai.com	2026-07-25 15:58:15 (3 days ago)	IP 66.92.198.154 在过去24小时内进行了 9 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data ... show more IP 66.92.198.154 在过去24小时内进行了 9 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found show less	Web App Attack
🇬🇧 Axel	2026-07-25 14:10:06 (3 days ago)	Blocked by Fail2Ban. Flagged by jail recidive \| UK-01	Brute-Force
🇬🇧 Axel	2026-07-25 13:54:02 (3 days ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /public/.env ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /public/.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇬🇧 Axel	2026-07-25 13:38:01 (3 days ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇫🇷 masterguru	2026-07-25 11:53:11 (4 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇫🇷 Feelautom	2026-07-25 09:13:20 (4 days ago)	[FeelAutom Auto-Ban] PathScan: /.env.staging (Score: 200)	Port Scan
🇩🇪 LRob	2026-07-25 04:23:43 (4 days ago)	CrowdSec: HTTP technology/vendor fingerprint probing (reconnaissance scan) \| req: /info.php \| UA: Mo ... show more CrowdSec: HTTP technology/vendor fingerprint probing (reconnaissance scan) \| req: /info.php \| UA: Mozilla/5.0 show less	Port Scan Web App Attack
🇺🇸 Vianpyro	2026-07-25 00:07:52 (4 days ago)	Honeypot: 46 request(s) in 50 min. Paths: /, /.env, /.env.development, /.env.staging, /.env.backup. ... show more Honeypot: 46 request(s) in 50 min. Paths: /, /.env, /.env.development, /.env.staging, /.env.backup. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 11504 (Private Customer). show less	Web App Attack Bad Web Bot Hacking
🇺🇸 mnsf	2026-07-25 00:06:24 (4 days ago)	Too many Status 40X (14) Scanning/Probing (18)	Brute-Force Web App Attack
🇫🇮 payincog	2026-07-25 00:00:30 (4 days ago)	Date: Jul 25 02:57:24 2026 EAT \| Reported IP: 66.92.198.154 mod_security \| id: 930130 949110 920440 ... show more Date: Jul 25 02:57:24 2026 EAT \| Reported IP: 66.92.198.154 mod_security \| id: 930130 949110 920440 \| US/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Sc show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 Zydzy	2026-07-24 23:29:18 (4 days ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 23:06:44 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 66.92.198.154 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 66.92.198.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 19:06:35.599932 2026] [security2:error] [pid 27299:tid 27315] [client 66.92.198.154:59504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.api.imasola.com"] [uri "/.env"] [unique_id "amPv--yts8UDPBdmN_KLnAAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 21:58:51 (4 days ago)	wordpress_scan attack on /wp-json/ \| User-Agent: Mozilla/5.0 \| Detected by PortSense API security sy ... show more wordpress_scan attack on /wp-json/ \| User-Agent: Mozilla/5.0 \| Detected by PortSense API security system show less	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 213.199.49.53

🇷🇴 193.230.189.189

🇴🇲 185.64.25.226

🇷🇺 176.118.197.17

🇺🇸 172.202.44.182

🇩🇪 167.94.145.28

🇩🇪 165.154.164.21

🇫🇷 157.173.124.175

🇨🇳 122.188.9.187

🇺🇦 95.47.162.62

🇫🇷 85.217.140.15

🇸🇬 2404:6800:4003:c05::123

🇫🇷 2001:41d0:404:200::908f

🇪🇨 201.218.0.25

🇹🇳 196.203.231.220

🇺🇸 189.104.6.70

🇮🇶 185.158.22.150

🇫🇷 178.18.246.144

🇧🇷 177.54.152.180

🇺🇸 160.153.176.197