JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.92.251.148

Neutral Activity

Abuse confidence score ?

0% Low Risk

129 reports

57 reporters · latest 2 years ago

ISP	Ikt-Solutions
Usage Type	Commercial
ASN	AS201899
Domain Name	iktsolutions.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.92.251.148 has been reported 129 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 91.92.251.148

This IP address has been reported a total of 129 times from 57 distinct sources. 91.92.251.148 was first reported on July 7th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Starburst SysOp Team	2024-08-06 20:30:00 (2 years ago)	[Tue Aug 06 20:30:28.292432 2024] [:error] [pid 3895866:tid 3896047] [client 91.92.251.148:63497] [c ... show more [Tue Aug 06 20:30:28.292432 2024] [:error] [pid 3895866:tid 3896047] [client 91.92.251.148:63497] [client 91.92.251.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "ZrKH5L9Ivi7rZE7ILkj3sgAAAMg"] show less	Hacking Brute-Force Web App Attack
Anonymous	2024-08-06 11:16:36 (2 years ago)	[05/Aug/2024:15:09:01 -0400] - [05/Aug/2024:15:09:25 -0400] .env probe script	Hacking
🇺🇸 BSG Webmaster	2024-08-06 07:35:23 (2 years ago)	Port scanning (Port 80)	Port Scan Hacking
Anonymous	2024-08-06 01:07:38 (2 years ago)	[Tue Aug 06 03:07:36.358241 2024] [authz_core:error] [pid 1030] [client 91.92.251.148:55390] AH01630 ... show more [Tue Aug 06 03:07:36.358241 2024] [authz_core:error] [pid 1030] [client 91.92.251.148:55390] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Aug 06 03:07:36.700216 2024] [authz_core:error] [pid 2037] [client 91.92.251.148:49812] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Aug 06 03:07:37.075836 2024] [authz_core:error] [pid 2036] [client 91.92.251.148:62495] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇩🇪 v1nc	2024-08-05 18:36:11 (2 years ago)	91.92.251.148 - - [05/Aug/2024:18:36:11 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more 91.92.251.148 - - [05/Aug/2024:18:36:11 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Hacking
🇺🇸 stypr	2024-08-05 16:09:51 (2 years ago)	Malicious activity detected on HTTP/HTTPS	Hacking Brute-Force Web App Attack
🇨🇦 legitssl	2024-08-05 13:25:28 (2 years ago)	91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (W ... show more 91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:09:25:27 -0400] "GET /conf/.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2024-08-05 11:45:51 (2 years ago)		Port Scan Web App Attack
🇫🇮 Mr-Money	2024-08-05 06:48:07 (2 years ago)	91.92.251.148 - - [05/Aug/2024:08:48:06 +0200] "GET /.env HTTP/1.1" 404 489 "-" "Mozilla/5.0 (Window ... show more 91.92.251.148 - - [05/Aug/2024:08:48:06 +0200] "GET /.env HTTP/1.1" 404 489 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:08:48:06 +0200] "GET /conf/.env HTTP/1.1" 404 489 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [05/Aug/2024:08:48:07 +0200] "GET /wp-content/.env HTTP/1.1" 404 489 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 Mark--	2024-08-03 20:53:19 (2 years ago)	Unauthorized connection attempt detected port 8080	Hacking
🇩🇪 McClay	2024-08-03 16:45:19 (2 years ago)	HTTP-404 spam:91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /.env HTTP/1.1" 404 1051 "-" "Mozi ... show more HTTP-404 spam:91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /.env HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /conf/.env HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /wp-content/.env HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /wp-admin/.env HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [03/Aug/2024:18:45:16 +0200] "GET /library/.env HTTP/1.1" 404 1051 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [03/Aug/2024:18:45: ... show less	Web App Attack
🇺🇸 jormaster3k	2024-08-03 07:06:36 (2 years ago)	Attack against Apache (too many 404s)	Web App Attack
🇳🇱 Savvii	2024-08-03 05:30:11 (2 years ago)	20 attempts against mh-misbehave-ban on argon	Brute-Force Bad Web Bot Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2024-08-02 18:22:45 (2 years ago)	91.92.251.148 - - [02/Aug/2024:18:22:40 +0000] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Window ... show more 91.92.251.148 - - [02/Aug/2024:18:22:40 +0000] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [02/Aug/2024:18:22:40 +0000] "GET /conf/.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [02/Aug/2024:18:22:41 +0000] "GET /wp-content/.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [02/Aug/2024:18:22:41 +0000] "GET /wp-admin/.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [02/Aug/2024:18:22:42 +0000] "GET /library/.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 91.92.251.148 - - [02/Aug/2024:18:22:42 +0 ... show less	Web Spam Brute-Force Web App Attack
Anonymous	2024-08-02 14:32:47 (2 years ago)	Probing to gain illegal access	Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:8160:1001:233f:9c9c:c84b:81d9:c55a

🇷🇺 195.239.40.213

🇬🇧 193.163.125.85

🇦🇷 190.183.134.46

🇳🇱 89.21.67.143

🇰🇿 45.13.17.253

🇪🇬 41.129.36.57

🇧🇷 2804:954:330:3d00:b465:bcb0:d73f:7759

🇧🇷 2804:4ec:1102:a5a6:c471:7e08:3ae8:3eba

🇹🇼 198.235.24.58

🇻🇪 190.97.240.24

🇧🇷 177.185.122.213

🇮🇶 169.224.18.19

🇷🇴 159.26.117.74

🇧🇷 131.72.246.75

🇺🇸 107.150.104.16

🇷🇴 103.14.106.210

🇨🇮 102.138.121.209

🇮🇶 91.106.41.20

🇺🇸 70.167.235.157