This IP address has been reported a total of
5
times from
4 distinct
sources.
91.92.242.254 was first reported on
October 8th 2026 , and the most recent report was
20 hours ago Netherlands
with 2
reports;
Czechia
with 1
report;
Italy
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Bad Web Bot
3
times;
Brute-Force
2
times;
Hacking
1
time;
SQL Injection
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
Alt255
2026-10-08 15:35:54
(20 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 91. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 91.92.242.254 - - \[08/Oct/2026:17:35:48 +0200\] "GET /wp-content/uploads/wp-clone/wpclone_backup/database.sql HTTP/1.1" 404 74696 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/127.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-08 15:15:32
(21 hours ago)
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 91.92.242.254 - - [08/Oct/2026:17:15:22 +0200] "GET /wp-content/uploads/wp-clone/wpclone_backup/database.sql HTTP/1.1" 404 59058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-08 14:35:08
(21 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-08 14:25:07
(21 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇵🇱
gandaflux
2026-10-08 14:21:32
(22 hours ago)
91.92.242.254 [redacted-domain] - [08/Oct/2026:16:21:31 +0200] "GET /wp-admin/admin-ajax.php?action= ...
show more
91.92.242.254 [redacted-domain] - [08/Oct/2026:16:21:31 +0200] "GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=1)+AND+(SELECT+1183+FROM+(SELECT(SLEEP(6)))UPad)+AND+(9752=9752&type=json HTTP/1.1" 400 1 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0"
91.92.242.254 [redacted-domain] - [08/Oct/2026:16:21:31 +0200] "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15"
show less
SQL Injection
Web App Attack
Showing 1 to
5
of 5 reports
