JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.243.156

91.92.243.156 was found in our database!

This IP was reported 785 times. Confidence of Abuse is 78%: ?

78%

ISP	OMEGATECH
Usage Type	Fixed Line ISP
ASN	AS202412
Domain Name	omegatech.sc
Country	🇳🇱 Netherlands
City	Rotterdam, South Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.243.156

Whois 91.92.243.156

IP Abuse Reports for 91.92.243.156:

This IP address has been reported a total of 785 times from 210 distinct sources. 91.92.243.156 was first reported on March 1st 2024, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 PingMeMaybe	2026-07-22 07:49:57 (39 minutes ago)	Blocked by UFW on hk [2087/tcp] Source port: 51875 TTL: 111 Packet length: 52 TOS: 0x02 This report ... show more Blocked by UFW on hk [2087/tcp] Source port: 51875 TTL: 111 Packet length: 52 TOS: 0x02 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-22 07:30:04 (59 minutes ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-07-21 16:03:15 (16 hours ago)	FortiGate detected IPS attack from IPv4 address 91.92.243.156	Hacking
🇨🇭 SOC [GOLINE SA]	2026-07-20 16:02:57 (1 day ago)	FortiGate detected IPS attack from IPv4 address 91.92.243.156	Hacking
🇨🇭 SOC [GOLINE SA]	2026-07-19 16:02:17 (2 days ago)	FortiGate detected IPS attack from IPv4 address 91.92.243.156	Hacking
🇨🇭 SOC [GOLINE SA]	2026-07-18 16:02:09 (3 days ago)	FortiGate detected IPS attack from IPv4 address 91.92.243.156	Hacking
🇨🇭 YF	2026-07-18 15:30:29 (3 days ago)	Python requests scanner	Web App Attack
🇳🇱 enpepet	2026-07-18 01:09:04 (4 days ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:python-requests/2.27.1 URL:/index.php?option=com_spp ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:python-requests/2.27.1 URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 FeG Deutschland	2026-07-18 00:46:05 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇩🇪 Ba-Yu	2026-07-17 20:21:49 (4 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 20:07:19 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 91.92.243.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.243.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:07:12.649382 2026] [security2:error] [pid 30259:tid 30259] [client 91.92.243.156:63276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|daebakdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daebakdesign.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akgWcHju3u_ToS6lvuEUsQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-03 16:21:55 (2 weeks ago)	(PERMBLOCK) 91.92.243.156 (US/United States/-) has had more than 4 temp blocks	Hacking
🇩🇪 AetherFox	2026-07-03 15:47:40 (2 weeks ago)	AetherFox VoidGuard detected: [Fri Jul 03 15:47:35.944471 2026] [authz_core:error] [pid 3377300:tid ... show more AetherFox VoidGuard detected: [Fri Jul 03 15:47:35.944471 2026] [authz_core:error] [pid 3377300:tid 3377310] [client 91.92.243.156:51163] AH01630: client denied by server configuration: proxy:https://[MASKED]/plugins/editors/jce/jce.xml [Fri Jul 03 15:47:36.316686 2026] [authz_core:error] [pid 3377300:tid 3377320] [client 91.92.243.156:51285] AH01630: client denied by server configuration: proxy:https://[MASKED]/administrator/components/com_jce/jce.xml [Fri Jul 03 15:47:36.609571 2026] [authz_core:error] [pid 3377301:tid 3377353] [client 91.92.243.156:51411] AH01630: client denied by server configuration: proxy:https://[MASKED]/plugins/system/jcemediabox/js/jcemediabox.js [Fri Jul 03 15:47:36.885945 2026] [authz_core:error] [pid 3377300:tid 3377309] [client 91.92.243.156:51488] AH01630: client denied by server configuration: proxy:https://[MASKED]/plugins/system/jce/css/content.css [Fri Jul 03 15:47:39.892027 2026] [authz_core:error] [pid 3377301:tid 337 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 15:20:40 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 91.92.243.156 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.92.243.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 11:20:33.001022 2026] [security2:error] [pid 24163:tid 24163] [client 91.92.243.156:63408] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ciptaconindotara.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akfTQHpOOYe66OxmWz8g2AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-03 15:18:36 (2 weeks ago)	(wordpress) Failed wordpress login from 91.92.243.156 (US/United States/-)	Brute-Force

Showing 1 to 15 of 785 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.209.97.14

🇫🇷 176.150.5.63

🇸🇬 165.22.49.138

🇬🇧 154.16.44.164

🇨🇦 85.217.149.72

🇨🇦 85.217.149.67

🇺🇸 72.56.169.144

🇩🇪 45.135.141.17

🇳🇱 204.76.203.18

🇵🇪 190.238.75.79

🇷🇺 178.185.136.57

🇨🇳 125.47.54.124

🇨🇳 119.249.100.45

🇨🇭 107.189.8.226

🇬🇧 87.236.176.126

🇲🇦 81.192.46.49

🇮🇳 14.99.171.46

🇮🇳 14.99.83.179

🇬🇧 5.252.83.65

🇺🇸 195.184.76.117