JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.241.117

91.92.241.117 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	OMEGATECH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.241.117

Whois 91.92.241.117

IP Abuse Reports for 91.92.241.117:

This IP address has been reported a total of 59 times from 55 distinct sources. 91.92.241.117 was first reported on July 4th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-10-23 07:31:39 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 15). show less	Hacking Web App Attack
🇺🇸 etu brutus	2026-10-23 04:07:56 (12 hours ago)	91.92.241.117 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇨🇭 backslash	2026-10-23 03:42:00 (12 hours ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
Anonymous	2026-10-23 02:00:47 (14 hours ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇫🇷 SpaceHost-Server	2026-10-22 22:29:26 (17 hours ago)		Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-10-22 22:08:45 (18 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇬🇧 openstrike.co.uk	2026-10-22 05:15:19 (1 day ago)	12 attacks on password/key grabbing URLs: GET /public/plugins/table/../../../../../../../../etc/pass ... show more 12 attacks on password/key grabbing URLs: GET /public/plugins/table/../../../../../../../../etc/passwd HTTP/1.1 show less	Hacking
🇵🇱 Tomasz S	2026-10-22 02:42:09 (1 day ago)	/var/log/fail2ban.log:2026-10-22 00:43:18,134 fail2ban.filter [681]: INFO [nginx-scanner] ... show more /var/log/fail2ban.log:2026-10-22 00:43:18,134 fail2ban.filter [681]: INFO [nginx-scanner] Found 91.92.241.117 - 2026-10-22 00:43:18 /var/log/fail2ban.log:2026-10-22 00:43:18,205 fail2ban.filter [681]: INFO [nginx-scanner] Found 91.92.241.117 - 2026-10-22 00:43:18 /var/log/fail2ban.log:2026-10-22 00:43:18,284 fail2ban.filter [681]: INFO [nginx-scanner] Found 91.92.241.117 - 2026-10-22 00:43:18 /var/log/fail2ban.log:2026-10-22 00:43:18,372 fail2ban.filter [ show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-10-21 23:59:42 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Starburst SysOp Team	2026-10-21 23:54:32 (1 day ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-mnz6-1) show less	Hacking
🇳🇱 ConsulHosting	2026-10-21 23:43:51 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇫🇷 masterguru	2026-10-21 23:28:31 (1 day ago)	URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ ... show more URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. (920440-131) show less	Hacking
🇫🇷 Zundapper	2026-10-21 23:21:00 (1 day ago)	91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT ... show more 91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET /kxs-1792624859488129888-nonexistent HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET /mysql.sql HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET /.env.old HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 91.92.241.117 - - [22/Oct/2026:01:20:59 +0200] "GET /.env.save HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" ... show less	Web App Attack Port Scan
Anonymous	2026-10-21 23:20:12 (1 day ago)	Bot / seems abusive / Apache connections: 24	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-10-21 23:19:02 (1 day ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.249.89.102

🇺🇸 192.241.179.233

🇺🇦 185.212.237.99

🇮🇳 135.235.196.148

🇮🇩 125.165.210.122

🇵🇭 112.207.191.16

🇲🇦 105.157.223.75

🇫🇷 90.47.156.217

🇨🇦 85.217.149.45

🇿🇦 41.181.156.205

🇫🇮 31.134.15.201

🇩🇪 217.181.87.128

🇩🇪 213.209.159.223

🇧🇷 200.181.100.171

🇩🇪 172.71.148.19

🇰🇷 125.129.1.253

🇨🇳 116.255.227.108

🇧🇩 116.204.143.65

🇺🇸 91.230.168.6

🇵🇸 77.91.181.46