Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 91.92.47.13
This IP address has been reported a total of
111
times from
69 distinct
sources.
91.92.47.13 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 28
reports;
Germany
with 20
reports;
United Kingdom of Great Britain and Northern Ireland
with 14
reports.
The most common categories in these recent reports were:
Web App Attack
79
times;
Bad Web Bot
34
times;
Brute-Force
25
times;
Hacking
14
times;
Port Scan
9
times;
Other
22
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(PERMBLOCK) 91.92.47.13 (-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direc ...
show more(PERMBLOCK) 91.92.47.13 (-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
Anonymous
(caddyscan) Scanner path probe from 91.92.47.13 (NL/The Netherlands/-): 5 in the last 3600 secs; Por ...
show more(caddyscan) Scanner path probe from 91.92.47.13 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.92.47.13 - - [28/Sep/2026:06:13:08 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 91.92.47.13 - - [28/Sep/2026:06:13:11 +0000] "GET /.env.bak HTTP/1.1"
[REDACTED] 200 2627 91.92.47.13 - - [28/Sep/2026:06:13:12 +0000] "GET /.aws/credentials HTTP/1.1"
[REDACTED] 200 2627 91.92.47.13 - - [28/Sep/2026:06:13:15 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 91.92.47.13 - - [28/Sep/2026:06:13:15 +0000] "GET /wp-config.php.bak HTTP/1.1"
show less
Port Scan
Anonymous
fail2ban jail apache-secrets-probe: 91.92.47.13 - - [27/Sep/2026:22:16:15 -0700] "GET /.env HTTP/1.1 ...
show morefail2ban jail apache-secrets-probe: 91.92.47.13 - - [27/Sep/2026:22:16:15 -0700] "GET /.env HTTP/1.1" 301 541 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
{"level":"info","ts":1790558456.1323557,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1790558456.1323557,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"91.92.47.13","remote_port":"60570","client_ip":"91.92.47.13","proto":"HTTP/1.1","method":"HEAD","host":"tcp.status.linkalock.com","uri":"/","headers":{"Accept":["*/*"]}},"bytes_read":0,"user_id":"","duration":0.00007373,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tcp.status.linkalock.com/"],"Content-Type":[]}}
{"level":"info","ts":1790558457.1509473,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"91.92.47.13","remote_port":"60580","client_ip":"91.92.47.13","proto":"HTTP/1.1","method":"GET","host":"tcp.status.linkalock.com","uri":"/robots.txt","headers":{"Accept-Language":["en-US,en;q=0.8"],"Sec-Fetch-Mode":["navigate"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Dest":["document"],"Use
...
show less
91.92.47.13 - - [26/Sep/2026:15:54:27 -0400] "GET /.env HTTP/1.1" 403 6293 "http://www.acornhealthca ...
show more91.92.47.13 - - [26/Sep/2026:15:54:27 -0400] "GET /.env HTTP/1.1" 403 6293 "http://www.acornhealthcare.bb/.env" "Mozilla/5.0 (iPad; CPU OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
