JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.92.47.81

91.92.47.81 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇳🇱 Netherlands
City	Eygelshoven, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.92.47.81

Whois 91.92.47.81

IP Abuse Reports for 91.92.47.81:

This IP address has been reported a total of 86 times from 69 distinct sources. 91.92.47.81 was first reported on July 17th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-20 00:37:02 (13 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 mail.avx.gr	2026-07-20 00:21:58 (28 minutes ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: avaxsh.avx.gr:80 91.92.47.81 - - [20/Jul/2026:03: ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: avaxsh.avx.gr:80 91.92.47.81 - - [20/Jul/2026:03:21:57 +0300] "GET /.env HTTP/1.1" 403 407 "http://avaxsh.avx.gr/" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Web App Attack
Anonymous	2026-07-19 23:51:57 (58 minutes ago)	Scenarios: http-probing Total requests: 72	Web App Attack
Anonymous	2026-07-19 23:43:34 (1 hour ago)	Scenarios: http-technology-probing Total requests: 18	Brute-Force Web App Attack
🇩🇪 janbro	2026-07-19 23:35:04 (1 hour ago)	Automated attempt to access sensitive configuration files.	Port Scan Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-19 22:01:45 (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-18. show less	Web App Attack SSH Hacking
Anonymous	2026-07-19 21:51:02 (2 hours ago)	Unauthorized SSH login attempts	Brute-Force SSH
Anonymous	2026-07-19 20:47:28 (4 hours ago)	(caddyscan) Scanner path probe from 91.92.47.81 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 91.92.47.81 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:20:47:22 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:20:47:22 +0000] "GET /wp-config.php HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:20:47:22 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:20:47:24 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:20:47:25 +0000] "GET /wp-config.php HTTP/1.1" show less	Port Scan
🇺🇸 antlac1	2026-07-19 19:15:17 (5 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-07-19 18:36:21 (6 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇴 tmiland	2026-07-19 18:35:37 (6 hours ago)	(nginx_404) Dot directory Honeypot Trap 91.92.47.81 (US/United States/-): 2 in the last 3600 secs; I ... show more (nginx_404) Dot directory Honeypot Trap 91.92.47.81 (US/United States/-): 2 in the last 3600 secs; IP: 91.92.47.81; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 91.92.47.81 - - [19/Jul/2026:20:35:33 +0200] "GET /.git/config HTTP/1.1" 404 1 "http://syncstorage../.git/config" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 91.92.47.81 - - [19/Jul/2026:20:35:34 +0200] "GET /.env HTTP/1.1" 404 1 "http://syncstorage..*/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Brute-Force
Anonymous	2026-07-19 18:25:13 (6 hours ago)	(caddyscan) Scanner path probe from 91.92.47.81 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 91.92.47.81 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:18:25:06 +0000] "GET /wp-config.php HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:18:25:06 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:18:25:07 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:18:25:12 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.92.47.81 - - [19/Jul/2026:18:25:12 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇳🇱 Site.eu	2026-07-19 16:11:54 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 4server	2026-07-19 15:03:04 (9 hours ago)	[SunJul1917:02:57.5575102026][security2:error][pid1550165:tid1550363][client91.92.47.81:0]ModSecurit ... show more [SunJul1917:02:57.5575102026][security2:error][pid1550165:tid1550363][client91.92.47.81:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"rssolution.ch\"][uri\"/wp-config.php\"][unique_id\"alznISZs9_PDM4sclNmmKQAAAAU\"]\,referer:http://rssolution.ch/ show less	Hacking Web App Attack
🇵🇫 www.gregorymariani.com	2026-07-19 15:02:33 (9 hours ago)	91.92.47.81 - - [19/Jul/2026:15:02:33 +0000] "GET /appsettings.json HTTP/1.1" 401 574 "http://comfy. ... show more 91.92.47.81 - - [19/Jul/2026:15:02:33 +0000] "GET /appsettings.json HTTP/1.1" 401 574 "http://comfy.gregorymariani.com/appsettings.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 725 0.000 [default-comfy-mars-service-80] [] - - - - 72aacb7a9d8893d41996dad156b2077a 91.92.47.81 - - [19/Jul/2026:15:02:33 +0000] "GET /app.js HTTP/1.1" 401 172 "http://comfy.gregorymariani.com/app.js" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" 678 0.000 [default-comfy-mars-service-80] [] - - - - 2b792b88d34008987b6336efa8661632 91.92.47.81 - - [19/Jul/2026:15:02:33 +0000] "GET /.env HTTP/1.1" 401 574 "http://comfy.gregorymariani.com/.env" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 691 0.000 [default-comfy-mars-service-80] [] - - - - f6cb4d302c0c9662299604a56c4fc1a4 ... show less	Brute-Force

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 46.105.132.35

🇹🇼 198.235.24.112

🇵🇱 194.180.49.220

🇸🇬 157.52.92.46

🇫🇮 147.185.133.244

🇺🇸 135.237.126.194

🇧🇩 103.102.207.154

🇳🇬 102.88.21.215

🇺🇸 70.16.249.249

🇩🇪 69.5.169.59

🇺🇸 47.85.196.221

🇧🇷 45.205.1.245

🇬🇷 31.217.163.221

🇲🇽 189.174.34.254

🇧🇷 189.85.105.209

🇳🇱 176.65.148.132

🇺🇸 151.245.251.177

🇺🇸 76.164.249.10

🇺🇸 74.94.234.151

🇰🇷 45.250.222.144