JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.242.167

91.92.242.167 was found in our database!

This IP was reported 202 times. Confidence of Abuse is 0%: ?

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.242.167

Whois 91.92.242.167

IP Abuse Reports for 91.92.242.167:

This IP address has been reported a total of 202 times from 76 distinct sources. 91.92.242.167 was first reported on June 27th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 advena	2024-06-28 00:16:03 (2 years ago)	91.92.242.167 (AS394711 LIMENET) was intercepted at 2024-06-28T00:15:25Z after violating WAF directi ... show more 91.92.242.167 (AS394711 LIMENET) was intercepted at 2024-06-28T00:15:25Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 22:52:09 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 18:52:03.351104 2024] [security2:error] [pid 13997] [client 91.92.242.167:63869] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.tenmenband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tenmenband.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn3tExpq9UMqQ5B3g99zBgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2024-06-27 22:34:30 (2 years ago)	SS5: Web Attack GET /wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 22:16:44 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 18:16:40.377460 2024] [security2:error] [pid 17907] [client 91.92.242.167:51652] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.cognicom.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cognicom.com"] [uri "/wp/wp-json/wp/v2/users/"] [unique_id "Zn3kyPq2rzzYKZTxRCncIwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-27 20:06:04 (2 years ago)	apache vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 18:31:08 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 14:31:03.839507 2024] [security2:error] [pid 6570] [client 91.92.242.167:56990] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.marv.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.marv.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn2v519RO7v-9cwMT4emQwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 directorioeducativo.com	2024-06-27 14:43:50 (2 years ago)	GET="/wp-includes/wlwmanifest.xml" Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ... show more GET="/wp-includes/wlwmanifest.xml" Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 show less	Web App Attack
Anonymous	2024-06-27 14:28:31 (2 years ago)	(wordpress) Failed wordpress login from 91.92.242.167 (BG/Bulgaria/-)	Brute-Force
🇵🇱 strefapi_com	2024-06-27 14:25:22 (2 years ago)	Brute-force web ...	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 12:33:00 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 08:32:53.062156 2024] [security2:error] [pid 10207] [client 91.92.242.167:64616] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rodandreelpiercam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodandreelpiercam.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn1b9RT3oBu6eG20QbM2BgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 11:18:40 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 07:18:35.837129 2024] [security2:error] [pid 23843] [client 91.92.242.167:63589] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thecommonsenseeconomist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecommonsenseeconomist.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn1Ki1u6GaDO_m38eoBkPgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 09:36:10 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 05:36:05.512419 2024] [security2:error] [pid 22035] [client 91.92.242.167:60297] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|geckoturner.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geckoturner.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn0yhTNakFCOek14gD45TQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 08:59:35 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 04:59:28.598167 2024] [security2:error] [pid 834] [client 91.92.242.167:62404] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cnphilos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cnphilos.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn0p8K-cUn0ws3_hXpro5AAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-27 08:34:10 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 04:34:06.322974 2024] [security2:error] [pid 17808] [client 91.92.242.167:65390] [client 91.92.242.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.hotpay.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hotpay.co"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zn0j_mK6IsXvZ6Su5uxq5wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-06-27 08:19:55 (2 years ago)	1.988 requests to /xmlrpc.php 1.040 requests to /wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot

Showing 181 to 195 of 202 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.232.87

🇩🇪 141.95.54.130

🇨🇳 120.48.74.25

🇫🇷 85.217.140.22

🇺🇸 47.220.24.254

🇫🇷 37.187.35.26

🇺🇸 216.25.89.91

🇫🇷 172.71.232.86

🇯🇵 139.162.116.160

🇨🇷 138.94.58.182

🇸🇮 102.220.160.124

🇱🇹 62.60.130.201

🇨🇳 58.218.178.134

🇺🇸 57.141.20.21

🇸🇬 47.128.42.212

🇳🇱 45.148.10.157

🇬🇧 45.82.76.134

🇰🇷 119.64.59.76

🇻🇳 103.9.205.62

🇫🇷 85.217.140.2