JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.42.245

91.92.42.245 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 100%: ?

100%

ISP	Euro Crypt EOOD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209630
Domain Name	evro.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.42.245

Whois 91.92.42.245

IP Abuse Reports for 91.92.42.245:

This IP address has been reported a total of 81 times from 49 distinct sources. 91.92.42.245 was first reported on June 4th 2026, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-06-05 11:52:54 (48 minutes ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprin ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/1080 (socks). Family fingerprint: proxy-scanner show less	DDoS Attack
🇺🇸 MPL	2026-06-05 11:33:19 (1 hour ago)	tcp/8118 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-05 11:15:56 (1 hour ago)	2026-06-05 11:15:56 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇩🇪 zupan	2026-06-05 11:14:18 (1 hour ago)	Blocked by UFW on vps [1080/tcp] \| SPT: 40938 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [1080/tcp] \| SPT: 40938 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 Origon	2026-06-05 11:08:10 (1 hour ago)	http-open-proxy - IP: 91.92.42.245 - time="2026-06-05T13:08:09+02:00" level=info msg="(555f66b4f6a7 ... show more http-open-proxy - IP: 91.92.42.245 - time="2026-06-05T13:08:09+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-open-proxy by ip 91.92.42.245 (SE/0) : 4h ban on Ip 91.92.42.245" module=db show less	Web App Attack
🇦🇺 2000cn.com.au	2026-06-05 10:01:31 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-open-proxy	Web App Attack
🇺🇸 xmission.com	2026-06-05 09:55:56 (2 hours ago)	Blocked by UFW (TCP on 80) Source port: 42520 TTL: 242 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 42520 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 91.92.42.245) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 KPS	2026-06-05 09:53:15 (2 hours ago)	PortscanM	Port Scan
🇺🇸 xmission.com	2026-06-05 09:29:57 (3 hours ago)	Blocked by UFW (TCP on 1080) Source port: 33971 TTL: 242 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1080) Source port: 33971 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 91.92.42.245) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 09:26:33 (3 hours ago)	(mod_security) mod_security (id:217210) triggered by 91.92.42.245 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217210) triggered by 91.92.42.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 05:26:24.936970 2026] [security2:error] [pid 7999:tid 7999] [client 91.92.42.245:53194] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|httpbin.org:443\|F\|4"] [data "CONNECT httpbin.org:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "httpbin.org"] [uri "/"] [unique_id "aiKWQFYGlOE14MoUsZ_vkgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-05 09:24:29 (3 hours ago)	2026-06-05 09:24:29 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 MPL	2026-06-05 09:08:56 (3 hours ago)	tcp port scan (5 or more attempts)	Port Scan
🇮🇩 hermawan	2026-06-05 08:56:56 (3 hours ago)	06/05/2026-15:56:55.269820 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ... show more 06/05/2026-15:56:55.269820 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 91.92.42.245:52450 -> 103.166.156.58:8000 ... show less	Email Spam Hacking
🇬🇧 gbzret4d	2026-06-05 08:39:51 (4 hours ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8085 CONNECT httpbin.org:443; 8085 [1] TCP	Hacking Bad Web Bot
🇩🇪 dsp	2026-06-05 08:06:31 (4 hours ago)	Firewall (ufw): excessive port scanning on [3129]	Port Scan

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 130.131.162.82

🇨🇳 118.195.209.46

🇸🇬 107.150.112.233

🇵🇱 87.251.64.155

🇬🇧 87.236.176.129

🇨🇳 14.103.114.231

🇨🇳 14.103.114.172

🇪🇪 196.196.253.20

🇬🇧 193.176.29.7

🇺🇸 162.216.149.227

🇸🇬 140.245.35.32

🇧🇩 103.183.62.2

🇫🇮 95.216.92.206

🇳🇱 45.148.10.152

🇺🇸 35.188.112.111

🇧🇷 187.93.68.178

🇨🇳 118.145.238.115

🇬🇷 85.73.69.63

🇱🇹 81.30.98.49

🇩🇪 77.91.71.11