JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.47.112

91.92.47.112 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇳🇱 Netherlands
City	Eygelshoven, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.47.112

Whois 91.92.47.112

IP Abuse Reports for 91.92.47.112:

This IP address has been reported a total of 221 times from 158 distinct sources. 91.92.47.112 was first reported on July 17th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-23 22:48:04 (1 hour ago)	CrowdSec: crowdsecurity/http-probing \| req: /.env \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT ... show more CrowdSec: crowdsecurity/http-probing \| req: /.env \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 22:27:59 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 91.92.47.112 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 91.92.47.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 18:27:53.652775 2026] [security2:error] [pid 2826887:tid 2826887] [client 91.92.47.112:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlascoombs.com"] [uri "/.git/config"] [unique_id "amKVaeLMW9SnRlDgcdJLkgAAAAw"], referer: http://atlascoombs.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 21:23:54 (3 hours ago)	91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /db.php HTTP/1.1" 404 29221 91.92.47.112 - - [23/ ... show more 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /db.php HTTP/1.1" 404 29221 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /settings.php HTTP/1.1" 404 29221 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /config.js HTTP/1.1" 404 29861 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /docker-compose.yml HTTP/1.1" 404 29861 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /database.php HTTP/1.1" 404 29221 91.92.47.112 - - [23/Jul/2026:23:23:08 +0200] "GET /application.yml HTTP/1.1" 404 29861 91.92.47.112 - - [23/Jul/2026:23:23:49 +0200] "GET /config/parameters.yml HTTP/1.1" 404 29861 91.92.47.112 - - [23/Jul/2026:23:23:49 +0200] "GET /config.json HTTP/1.1" 404 29861 91.92.47.112 - - [23/Jul/2026:23:23:49 +0200] "GET /configuration.php HTTP/1.1" 404 29221 91.92.47.112 - - [23/Jul/2026:23:23:49 +0200] "GET /pinfo.php HTTP/1.1" 404 27681 ... show less	Web Spam Web App Attack
🇩🇪 hchristo	2026-07-23 21:10:34 (3 hours ago)	[Thu Jul 23 23:10:29.833385 2026] [proxy_fcgi:error] [pid 1286:tid 1363] [client 91.92.47.112:59068] ... show more [Thu Jul 23 23:10:29.833385 2026] [proxy_fcgi:error] [pid 1286:tid 1363] [client 91.92.47.112:59068] AH01071: Got error 'Primary script unknown', referer: http://viyolacp.de/info.php [Thu Jul 23 23:10:29.838645 2026] [proxy_fcgi:error] [pid 1286:tid 1348] [client 91.92.47.112:59046] AH01071: Got error 'Primary script unknown', referer: http://viyolacp.de/wp-config.php [Thu Jul 23 23:10:29.843687 2026] [proxy_fcgi:error] [pid 1286:tid 1378] [client 91.92.47.112:59082] AH01071: Got error 'Primary script unknown', referer: http://viyolacp.de/config.php [Thu Jul 23 23:10:29.844025 2026] [proxy_fcgi:error] [pid 1286:tid 1351] [client 91.92.47.112:59044] AH01071: Got error 'Primary script unknown', referer: http://viyolacp.de/phpinfo.php [Thu Jul 23 23:10:34.427513 2026] [proxy_fcgi:error] [pid 1286:tid 1338] [client 91.92.47.112:59102] AH01071: Got error 'Primary script unknown\n', referer: http://demo.viyolacp.de/info.php ... show less	Brute-Force
🇩🇪 pscriptos	2026-07-23 20:01:36 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇷🇴 iulianh	2026-07-23 18:57:16 (5 hours ago)	*	Brute-Force SSH
🇨🇿 ddw	2026-07-23 18:28:22 (6 hours ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇺🇸 Matthew Ping	2026-07-23 18:15:02 (6 hours ago)	ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 Major Hostility	2026-07-23 17:15:42 (7 hours ago)	"GET /appsettings.json HTTP/1.1" 404 "GET /server.js HTTP/1.1" 404 "GET /config.php HTTP/1.1" 404 "G ... show more "GET /appsettings.json HTTP/1.1" 404 "GET /server.js HTTP/1.1" 404 "GET /config.php HTTP/1.1" 404 "GET /.git/config HTTP/1.1" 404 "GET /app.js HTTP/1.1" 404 "GET /info.php HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /phpinfo.php HTTP/1.1" 404 show less	Web App Attack
🇸🇪 vaia.cloud	2026-07-23 17:15:02 (7 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2026-07-23 15:17:15 (9 hours ago)	by Attack Lagwatch(gw)	DDoS Attack Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-23 15:04:43 (9 hours ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇳🇱 WeCloudit-Anti-Abuse	2026-07-23 13:48:51 (10 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇯🇵 bokumin.org	2026-07-23 13:32:56 (11 hours ago)	[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.env"] [id "949110"] [m ... show more [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.env"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] show less	Web App Attack
🇪🇸 alferez	2026-07-23 13:23:25 (11 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack

Showing 1 to 15 of 221 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 188.53.162.157

🇸🇪 104.23.223.127

🇺🇸 64.62.156.94

🇺🇸 49.51.191.168

🇺🇸 45.33.125.59

🇸🇳 41.82.207.36

🇪🇨 177.234.209.102

🇺🇸 173.239.240.233

🇨🇳 124.239.169.52

🇺🇸 104.204.222.170

🇫🇮 77.105.161.120

🇺🇸 66.132.195.97

🇺🇸 64.62.197.88

🇳🇱 45.154.98.52

🇫🇮 45.148.101.101

🇳🇱 45.148.10.204

🇬🇧 5.252.83.111

🇩🇪 2a00:19e0:3005:2ff:a1ae:4f8a:8e0d:5966

🇨🇳 220.154.133.230

🇨🇳 218.25.89.208