JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.92.240.138

Neutral Activity

Abuse confidence score ?

0% Low Risk

658 reports

204 reporters · latest 1 year ago

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.92.240.138 has been reported 658 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 91.92.240.138

Export CSV

This IP address has been reported a total of 658 times from 204 distinct sources. 91.92.240.138 was first reported on February 17th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2024-10-24 05:19:33 (1 year ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇩🇪 bogdanv	2024-08-27 07:59:18 (2 years ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇬🇧 findlab	2024-07-29 21:10:02 (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2024-07-29 16:41:19 (2 years ago)	Web Probe / Attack NCT	Web App Attack
Anonymous	2024-07-29 09:49:54 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
Anonymous	2024-07-29 07:03:50 (2 years ago)	91.92.240.138 - - [29/Jul/2024:08:57:27 +0200] "GET /xmlrpc.php HTTP/1.1" 404 514 "-" "Mozlila/5.0 ( ... show more 91.92.240.138 - - [29/Jul/2024:08:57:27 +0200] "GET /xmlrpc.php HTTP/1.1" 404 514 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.240.138 - - [29/Jul/2024:08:57:34 +0200] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 200 2989 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.240.138 - - [29/Jul/2024:08:57:58 +0200] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 404 514 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.240.138 - - [29/Jul/2024:08:59:46 +0200] "GET /wp-login.php HTTP/1.1" 404 514 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie S ... show less	Brute-Force
🇵🇱 mkey	2024-07-29 06:54:38 (2 years ago)	WEB-REQ-ATACK: Invalid URI in request [GET /about.php]	Hacking Web App Attack
Anonymous	2024-07-29 01:55:16 (2 years ago)	wordpress-trap	Web App Attack
🇬🇧 Mendip_Defender	2024-07-28 21:18:01 (2 years ago)	91.92.240.138 - - [28/Jul/2024:22:17:51 +0100] "GET /wp-content/uploads/about.php HTTP/2.0" 403 548 ... show more 91.92.240.138 - - [28/Jul/2024:22:17:51 +0100] "GET /wp-content/uploads/about.php HTTP/2.0" 403 548 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.240.138 - - [28/Jul/2024:22:18:14 +0100] "GET /wp-includes/js/index.php HTTP/2.0" 403 548 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 findlab	2024-07-28 17:00:03 (2 years ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇧🇷 leolemos	2024-07-28 16:34:19 (2 years ago)	[Sun Jul 28 13:24:20.145710 2024] [proxy_fcgi:error] [pid 985761:tid 257421398110400] [client 91.92. ... show more [Sun Jul 28 13:24:20.145710 2024] [proxy_fcgi:error] [pid 985761:tid 257421398110400] [client 91.92.240.138:0] AH01071: Got error 'Primary script unknown' [Sun Jul 28 13:26:35.870367 2024] [proxy_fcgi:error] [pid 985761:tid 257422740287680] [client 91.92.240.138:0] AH01071: Got error 'Primary script unknown' [Sun Jul 28 13:34:19.113777 2024] [proxy_fcgi:error] [pid 985761:tid 257422864478400] [client 91.92.240.138:0] AH01071: Got error 'Primary script unknown' show less	Brute-Force Web App Attack
🇨🇭 teamsecure	2024-07-28 09:29:34 (2 years ago)	Banned for trying to access xmlrpc	Web App Attack
🇩🇪 R.G.	2024-07-28 01:24:05 (2 years ago)	(ScanningForFiles) Scanning for files triggerd 91.92.240.138 (NL/The Netherlands/-): 10 in the last ... show more (ScanningForFiles) Scanning for files triggerd 91.92.240.138 (NL/The Netherlands/-): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2024-07-27 20:14:30 (2 years ago)	wordpress-trap	Web App Attack
🇩🇪 updown.io	2024-07-27 15:44:22 (2 years ago)	{"level":"info","ts":1722094591.1519005,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1722094591.1519005,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"91.92.240.138","remote_port":"57663","proto":"HTTP/1.1","method":"GET","host":"webdisk.josemariaobando.edu.n6yk.status.updown.io","uri":"/about.php","headers":{"Accept":["/"],"User-Agent":["Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"],"Connection":["keep-alive"],"Accept-Encoding":["gzip, deflate"]}},"user_id":"","duration":0.000058331,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://webdisk.josemariaobando.edu.n6yk.status.updown.io/about.php"],"Content-Type":[]}} {"level":"info","ts":1722094604.1441329,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"91.92.240.138","remote_port":"59893","proto":"HTTP/1.1","method":"GET","host":"webdisk.josemariaobando.edu.n6yk.status.updown.io ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 658 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇮🇳 122.168.123.73

🇨🇳 111.26.177.216

🇮🇳 103.209.132.251

🇨🇦 209.50.178.178

🇵🇪 190.234.43.54

🇨🇳 182.43.19.187

🇩🇪 164.92.164.39

🇸🇬 121.6.97.6

🇫🇷 85.217.140.52

🇬🇧 82.108.54.81

🇮🇳 59.177.12.54

🇳🇱 45.156.87.44

🇧🇷 200.159.0.218

🇺🇸 162.243.147.237

🇭🇰 152.32.172.234

🇲🇦 105.158.238.58

🇻🇳 103.57.220.98

🇫🇷 91.231.89.5

🇺🇸 66.80.39.67