This IP address has been reported a total of
48
times from
32 distinct
sources.
91.92.33.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[AUTORAVALT][[09/07/2026 - 07:09:14 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Att ...
show more[AUTORAVALT][[09/07/2026 - 07:09:14 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to probe for or exploit install]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
[AUTORAVALT][[09/07/2026 - 06:33:37 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Att ...
show more[AUTORAVALT][[09/07/2026 - 06:33:37 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to probe for or exploit install]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
[AUTORAVALT][[08/07/2026 - 21:23:28 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Att ...
show more[AUTORAVALT][[08/07/2026 - 21:23:28 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to probe for or exploit install]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
[AUTORAVALT][[08/07/2026 - 20:45:52 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Att ...
show more[AUTORAVALT][[08/07/2026 - 20:45:52 -03:00 UTC]
Attack from [91.92.33.114] Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web App Attack -> Attempts to probe for or exploit install]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
Anonymous
Reported from Nginx log analysis 19. Log: 91.92.33.114 - - [08/Jul/2026:xx:xx:xx 0200] "GET / HTTP/ ...
show moreReported from Nginx log analysis 19. Log: 91.92.33.114 - - [08/Jul/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" "DE Germany Frankfurt am Main" "AS207043" "Dedik Services Limited" | 91.92.33.114 - - [08/Jul/2026:xx:xx:xx 0200] "GET /global-protect/login.esp HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" "DE Germany Frankfurt am Main" "AS207043" "Dedik Services Limited" | 91.92.33.114 - - [08/Jul/2026:xx:xx:xx 0200] "GET /ssl-vpn/login.esp HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" "DE Germany Frankfurt am Main" "AS207043" "Dedik Services Limited"
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 628
events: 1
created_a ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 628
events: 1
created_at: 2026-07-08T09:25:58Z
message: Ip 91.92.33.114 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-07-08 09:25:58.01557044 +0000 UTC
target_uri: ["/global-protect/login.esp"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"]
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 48 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ