JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.180.239.91

92.180.239.91 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 48%: ?

48%

ISP	Orange Slovensko, a.s.
Usage Type	Fixed Line ISP
ASN	AS15962
Hostname(s)	92-180-239-91.dynamic.orange.sk
Domain Name	orange.sk
Country	🇸🇰 Slovakia
City	Zvolen, Banska Bystrica Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.180.239.91

Whois 92.180.239.91

IP Abuse Reports for 92.180.239.91:

This IP address has been reported a total of 10 times from 7 distinct sources. 92.180.239.91 was first reported on September 14th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-18 05:00:06 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 03:11:59 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 92.180.239.91 (92-180-239-91.dynamic.orange.sk) ... show more (mod_security) mod_security (id:225170) triggered by 92.180.239.91 (92-180-239-91.dynamic.orange.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 23:11:55.932961 2026] [security2:error] [pid 22699:tid 22707] [client 92.180.239.91:51661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.eldesvandemaggie.com.emehache.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.eldesvandemaggie.com.emehache.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aqyr-ymHs7U0Kdd9LG2y1wAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 07:39:51 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 92.180.239.91 (92-180-239-91.dynamic.orange.sk) ... show more (mod_security) mod_security (id:225170) triggered by 92.180.239.91 (92-180-239-91.dynamic.orange.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:39:47.064584 2026] [security2:error] [pid 8249:tid 8249] [client 92.180.239.91:11528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pinebrookdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pinebrookdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aquZQ__KJRgATHwGxmT2QAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-09-16 05:20:05 (2 days ago)	Wordfence waf block on baystatereentrynetwork	Web App Attack
🇲🇽 octageeks.com	2026-09-16 04:08:49 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇹 CoreTech srl	2026-09-15 08:18:56 (3 days ago)	cloudlinux2 fail2ban: 2026-09-15 10:14:18,640 fail2ban.filter [1908]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-15 10:14:18,640 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 198.46.185.119 - 2026-09-15 10:14:18cloudlinux2 fail2ban: 2026-09-15 10:14:24,501 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 45.130.83.209 - 2026-09-15 10:14:24cloudlinux2 fail2ban: 2026-09-15 10:14:29,095 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 45.130.83.209 - 2026-09-15 10:14:28cloudlinux2 fail2ban: 2026-09-15 10:14:30,784 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 92.222.92.185 - 2026-09-15 10:14:30cloudlinux2 fail2ban: 2026-09-15 10:14:31,334 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 173.234.151.189 - 2026-09-15 10:14:31cloudlinux2 fail2ban: 2026-09-15 10:14:46,789 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 92.180.239.91 - 2026-09-15 10:14:45cloudlinux2 fail2ban: 2026-09-15 10:15:29,821 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 83.195.189.224 - 2026-09-15 10:15:29c show less	Web App Attack
🇩🇪 FeG Deutschland	2026-09-15 05:15:08 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 LRob	2026-09-15 05:09:46 (3 days ago)	WordPress login brute-force \| path: /wp-login.php \| 2026-09-15 05:09 UTC	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-09-14 21:27:31 (3 days ago)	WordPress login attempt	Brute-Force
🇩🇪 LRob	2026-09-14 18:35:50 (3 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /wp-login.php \| 2026-09-14 18:35 UTC show less	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::38

🇨🇩 169.159.210.118

🇵🇭 165.154.59.90

🇺🇸 162.216.149.80

🇺🇸 137.184.129.137

🇨🇳 124.193.81.23

🇩🇪 82.139.195.111

🇸🇬 47.128.38.81

🇺🇸 40.124.186.172

🇺🇸 20.168.116.153

🇪🇬 197.56.33.48

🇫🇮 147.185.133.215

🇵🇱 138.124.64.90

🇹🇭 125.26.202.220

🇰🇿 88.204.196.70

🇷🇴 80.94.92.234

🇮🇩 212.34.194.21

🇨🇳 203.176.95.143

🇪🇨 191.99.71.161

🇫🇷 176.31.21.38