JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.240.86

91.92.240.86 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.240.86

Whois 91.92.240.86

IP Abuse Reports for 91.92.240.86:

This IP address has been reported a total of 67 times from 28 distinct sources. 91.92.240.86 was first reported on November 5th 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-27 19:20:13 (9 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇮 [email protected]	2026-08-27 03:00:15 (1 day ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on autodiscover.sommeraka ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on autodiscover.sommerakademie-kinderbesserverstehen.de (Directory traversal #1) 91.92.240.86 (DE/Germany/-): 1 in the last 3600 secs (CF_ENABLE); IP: 91.92.240.86; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
Anonymous	2026-08-26 23:35:34 (1 day ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-26 23:17:36 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇨🇦 smithoo4	2026-08-26 20:36:38 (1 day ago)	91.92.240.86 - - [26/Aug/2026:16:36:35 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; In ... show more 91.92.240.86 - - [26/Aug/2026:16:36:35 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 91.92.240.86 - - [26/Aug/2026:16:36:37 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇨🇿 SystemAdmin	2026-08-26 17:30:22 (1 day ago)	Doing bad things...	Web App Attack
🇦🇹 Pingger Shikkoken	2026-08-26 09:58:43 (1 day ago)	2026-08-26T09:58:43+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-08-26T09:58:43+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=91.92.240.86 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=30869 DF PROTO=TCP SPT=45542 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-26T09:58:44+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=91.92.240.86 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=30870 DF PROTO=TCP SPT=45542 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-26T09:58:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=91.92.240.86 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=30871 DF PROTO=TCP SPT=45542 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇸 LotPhantom	2026-08-26 02:48:26 (2 days ago)	91.92.240.86 - - [26/Aug/2026:02:48:09 +0000] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; In ... show more 91.92.240.86 - - [26/Aug/2026:02:48:09 +0000] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0" ... show less	Web App Attack
🇺🇸 Charlesiv	2026-08-25 22:01:30 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 202412 (Omegatech LTD) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 202412 (Omegatech LTD) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-25T21:04:59Z Ray ID: a30d8d65cc02ea6d UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0 show less	Bad Web Bot
🇳🇱 javierin	2026-08-25 15:55:10 (2 days ago)	91.92.240.86 - blogs.javierin.com - - [25/Aug/2026:15:55:07 +0000] "GET / HTTP/1.1" 200 4456 "-" "Mo ... show more 91.92.240.86 - blogs.javierin.com - - [25/Aug/2026:15:55:07 +0000] "GET / HTTP/1.1" 200 4456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 91.92.240.86 - blogs.javierin.com - - [25/Aug/2026:15:55:10 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" ... show less	Web App Attack Hacking
🇦🇺 paulshipley.com.au	2026-08-25 12:37:36 (2 days ago)	[Tue Aug 25 22:37:35.251729 2026] [security2:error] [pid 230962] [client 91.92.240.86:37050] [client ... show more [Tue Aug 25 22:37:35.251729 2026] [security2:error] [pid 230962] [client 91.92.240.86:37050] [client 91.92.240.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bermanfamily.com.au"] [uri "/"] [unique_id "ao2MjyVxafry780arMjaEQAAAAA"] ... show less	Web App Attack
🇩🇪 bancix	2026-08-25 11:41:23 (2 days ago)	Heimdall NIDS: Automatic ban triggered. Reason: RST_LIMIT_EXCEEDED (5/5)	Port Scan
🇮🇩 Burayot	2026-08-25 06:48:33 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 91.92.240.86 (DE/Germany/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 91.92.240.86 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-08-25 06:37:09 (2 days ago)	Automatic report from firewall log	Port Scan Hacking Web App Attack
🇺🇸 EiE-jp	2026-08-22 19:56:02 (5 days ago)	Blocked by ECL FireGuard: 6 unauthorised connection attempts to cPanel (2083/tcp) in 10m	Port Scan

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.218

🇳🇱 185.224.128.16

🇧🇴 177.222.63.155

🇰🇷 124.195.255.12

🇦🇪 92.99.108.27

🇺🇸 91.230.168.82

🇳🇱 91.92.242.223

🇳🇱 91.92.42.64

🇪🇨 45.70.198.9

🇩🇪 43.228.157.9

🇰🇪 41.90.100.147

🇸🇬 34.87.159.148

🇺🇸 2001:470:2cc:1::256

🇺🇸 204.111.106.80

🇭🇰 203.218.96.187

🇦🇷 200.59.121.35

🇺🇸 172.239.71.239

🇺🇸 162.241.219.206

🇨🇳 124.117.194.105

🇻🇳 118.68.63.185