JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.92.253.147

Neutral Activity

Abuse confidence score ?

0% Low Risk

453 reports

142 reporters · latest 2 years ago

ISP	E-CARD LTD.
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Hostname(s)	ip-92-253-147.e-card.bg
Domain Name	e-card.bg
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.92.253.147 has been reported 453 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 91.92.253.147

Export CSV

This IP address has been reported a total of 453 times from 142 distinct sources. 91.92.253.147 was first reported on December 5th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 kumiko	2024-10-01 11:42:09 (2 years ago)	[2024-10-01 11:42:08] Persistent attack/probing over several days.	Port Scan Brute-Force Bad Web Bot
Anonymous	2024-10-01 11:08:47 (2 years ago)	[30/Sep/2024:09:04:36 -0400] \"GET /.env HTTP/1.1\" \"BlackBerry8330/4.3.0 Profile/MIDP-2.0 Configur ... show more [30/Sep/2024:09:04:36 -0400] \"GET /.env HTTP/1.1\" \"BlackBerry8330/4.3.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/105\" [30/Sep/2024:09:07:33 -0400] \"GET /.env HTTP/1.1\" \"Mozilla/4.8 [en] (X11; U; SunOS; 5.7 sun4u)\" show less	Hacking
🇺🇸 anon333	2024-09-30 16:36:36 (2 years ago)	Hacker syslog review 1727714196	Hacking
🇪🇸 mescribano	2024-09-30 16:10:10 (2 years ago)		Bad Web Bot Web App Attack
🇫🇷 jk jk	2024-09-30 15:40:53 (2 years ago)	GoPot Honeypot 1	Hacking Web App Attack
🇩🇪 barbarella	2024-09-30 15:16:51 (2 years ago)	Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 15 ... show more Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 15:17:27 Configuration snooping with .env file (GET /.env) show less	Hacking Web App Attack
🇩🇪 ut-addicted.com	2024-09-30 15:02:39 (2 years ago)	\[Mon Sep 30 17:02:37.588531 2024\] \[:error\] \[pid 21722:tid 140449457108736\] \[client 91.92.253. ... show more \[Mon Sep 30 17:02:37.588531 2024\] \[:error\] \[pid 21722:tid 140449457108736\] \[client 91.92.253.147:60008\] \[client 91.92.253.147\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "Zvq9jXPt0JjC4x7xWh4OJQAAAMI"\] show less	Brute-Force Web App Attack
Anonymous	2024-09-30 14:51:25 (2 years ago)	Legion Credential Harvester / SMTP Hijacker: /.env	Hacking Web App Attack
🇺🇸 thefoofighter	2024-09-30 14:46:50 (2 years ago)	[Mon Sep 30 14:42:53.327289 2024] [:error] [pid 2662629] [client 91.92.253.147:59262] [client 91.92. ... show more [Mon Sep 30 14:42:53.327289 2024] [:error] [pid 2662629] [client 91.92.253.147:59262] [client 91.92.253.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "Zvq47YFv2xCoXA7zYzGEgwAAAAM"] [Mon Sep 30 14:46:49.962373 2024] [:error] [pid 2662487] [client 91.92.253.147:44938] [client 91.92.253.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] ... show less	Bad Web Bot Web App Attack
🇫🇷 Vaction	2024-09-30 14:40:49 (2 years ago)	91.92.253.147 - - [30/Sep/2024:16:40:48 +0200] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Symbia ... show more 91.92.253.147 - - [30/Sep/2024:16:40:48 +0200] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (SymbianOS/9.4; Series60/5.0 NokiaN97-1/10.0.012; Profile/MIDP-2.1 Configuration/CLDC-1.1; en-us) AppleWebKit/525 (KHTML, like Gecko) WicKed/7.1.12344" show less	Hacking Bad Web Bot Web App Attack
🇬🇧 PulseServers	2024-09-30 14:40:04 (2 years ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - UK10 Honeypot ...	Hacking Web App Attack
🇫🇷 Security_Whaller	2024-09-30 14:38:43 (2 years ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇺🇸 dpinse	2024-09-30 14:33:15 (2 years ago)	teler detected CVE-2017-16894 against resource /.env from 91.92.253.147	Web App Attack
🇫🇷 someone	2024-09-30 14:30:56 (2 years ago)	:443 91.92.253.147 - - [30/Sep/2024:16:30:55 +0200] "GET /.env HTTP/1.1" 404 13404 "-" "Mozilla/5.0 ... show more :443 91.92.253.147 - - [30/Sep/2024:16:30:55 +0200] "GET /.env HTTP/1.1" 404 13404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36" show less	Web App Attack
🇮🇪 Jim Keir	2024-09-30 14:23:39 (2 years ago)	2024-09-30 14:23:38 91.92.253.147 File scanning, blocking 91.92.253.147 for 5 minutes	Web App Attack

Showing 1 to 15 of 453 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 219.95.215.132

🇺🇸 173.252.82.30

🇺🇸 157.245.113.227

🇺🇸 134.33.97.70

🇨🇳 120.48.80.100

🇺🇿 94.158.49.223

🇫🇷 85.217.140.46

🇮🇶 65.20.163.103

🇱🇹 62.60.130.240

🇳🇱 45.148.10.152

🇸🇬 43.156.169.49

🇺🇸 195.184.76.188

🇳🇱 193.47.62.69

🇦🇷 190.112.138.189

🇪🇸 188.164.195.167

🇸🇪 171.25.158.47

🇺🇸 137.184.214.16

🇨🇳 118.122.195.91

🇨🇳 112.66.190.1

🇳🇱 109.160.32.156