This IP address has been reported a total of
1,305
times from
232 distinct
sources.
91.92.42.243 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
05/26/2026-06:58:53.793532 src=91.92.42.243 dst=89.144.63.69:5432 proto=6 msg=ET SCAN Suspicious inb ...
show more05/26/2026-06:58:53.793532 src=91.92.42.243 dst=89.144.63.69:5432 proto=6 msg=ET SCAN Suspicious inbound to PostgreSQL port 5432
show less
Detectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkho ...
show moreDetectors: [NGINX] | Reasons: Automated scan targeting an unauthorized host or default server sinkhole | Nginx: Default server trap hit | Tech Evidence: JA4: t13i1909h2 | UA: check-host.cc Intel Platform (https://check-host.cc/about/scan-infra; [email protected])
show less
LF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 91.92.42.243 (BG/Bulgaria/-): 1 in the last 3600 ...
show moreLF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 91.92.42.243 (BG/Bulgaria/-): 1 in the last 3600 secs
show less
05/26/2026-06:39:34.247603 src=91.92.42.243 dst=89.144.63.175:3306 proto=6 msg=ET SCAN Suspicious in ...
show more05/26/2026-06:39:34.247603 src=91.92.42.243 dst=89.144.63.175:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306
show less
SQL Injection
Anonymous
May 26 00:38:53 localhost kernel: [108115664.356566] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show moreMay 26 00:38:53 localhost kernel: [108115664.356566] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.92.42.243 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=1634 PROTO=TCP SPT=61430 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 00:38:53 localhost kernel: [108115664.356790] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.92.42.243 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=1634 PROTO=TCP SPT=61430 DPT=27017 SEQ=2733838229 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 00:39:02 localhost kernel: [108115673.607397] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.92.42.243 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=491 PROTO=TCP SPT=61080 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 00:39:02 localhost kernel: [108115673.607437] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.92.42.243 DST=[mungedIP2] LEN=40 TOS=0x00 P
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=91.92.42.243; proto=TCP; source_port=61481; target_port=23; flags=SYN
show less
TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, We ...
show moreTSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP from Bulgaria (AS209630, LLC Vash Kredit Bank).
show less
Blocked by UFW (TCP on 443)
Source port: 61007
TTL: 238
Packet length: 40
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 443)
Source port: 61007
TTL: 238
Packet length: 40
TOS: 0x00
This report (for 91.92.42.243) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
05/26/2026-06:07:43.299775 src=91.92.42.243 dst=5.175.170.185:3306 proto=6 msg=ET SCAN Suspicious in ...
show more05/26/2026-06:07:43.299775 src=91.92.42.243 dst=5.175.170.185:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306
show less
May 26 06:04:45 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 sec ...
show moreMay 26 06:04:45 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=91.92.42.243, lip=45.92.8.208, TLS, TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
...
show less
Brute-Force
Showing 1201 to
1215
of 1305 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩