JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.241.36.159

92.241.36.159 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 98%: ?

98%

ISP	Umniah Lil-Hawatef Al-Mutanaqelah Co.
Usage Type	Fixed Line ISP
ASN	AS9038
Domain Name	umniah.com
Country	🇯🇴 Jordan
City	Zarqa, Zarqa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.241.36.159

Whois 92.241.36.159

IP Abuse Reports for 92.241.36.159:

This IP address has been reported a total of 38 times from 26 distinct sources. 92.241.36.159 was first reported on January 29th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-07-16 23:05:08 (1 hour ago)		Web App Attack
🇫🇮 YF	2026-07-16 23:00:35 (1 hour ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇪🇸 alferez	2026-07-16 22:51:17 (2 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 22:43:39 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:43:31.371845 2026] [security2:error] [pid 27531:tid 27531] [client 92.241.36.159:28463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|goldcountrygermanamericanclub.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "goldcountrygermanamericanclub.org"] [uri "/xmlrpc.php"] [unique_id "allek696r2pQd7shXFA94wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-16 22:31:43 (2 hours ago)		Brute-Force Web App Attack
Anonymous	2026-07-16 19:57:33 (4 hours ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.galani.com.gr; logs=/var/log/httpd/domains/galani.com.gr ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.galani.com.gr; logs=/var/log/httpd/domains/galani.com.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 16:43:05 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:42:58.100997 2026] [security2:error] [pid 14893:tid 14893] [client 92.241.36.159:31864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|blublk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blublk.com"] [uri "/xmlrpc.php"] [unique_id "alkKEr1EE0do2tn5RjQMDQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 12:44:28 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 08:44:23.818540 2026] [security2:error] [pid 20056:tid 20056] [client 92.241.36.159:26869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|sarrisbilliards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sarrisbilliards.com"] [uri "/xmlrpc.php"] [unique_id "aljSJ-W53cgEBnVpO_S6GwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:49:38 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:49:33.699034 2026] [security2:error] [pid 17389:tid 17389] [client 92.241.36.159:31700] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "alhi3WJc_PrkyKJ6CKnTlQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-16 04:15:42 (20 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 22:38:35 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 18:38:30.707731 2026] [security2:error] [pid 13385:tid 13494] [client 92.241.36.159:21162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|vancekelly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "algL5v65-UX5BYTTHsK0ygAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 16:01:20 (1 day ago)		Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-15 05:31:20 (1 day ago)	(xmlrpc) Failed xmlrpc access from 92.241.36.159 (JO/Jordan/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 masterguru	2026-07-15 03:14:45 (1 day ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-15 01:12:59 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 92.241.36.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 21:12:54.818904 2026] [security2:error] [pid 31319:tid 31319] [client 92.241.36.159:29254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.241.36.159 (+1 hits since last alert)\|csm-dtc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "csm-dtc.com"] [uri "/xmlrpc.php"] [unique_id "albelpAtm_pAgK4D5E_KHwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 43.228.157.180

🇺🇸 2a04:c300:400::5e

🇹🇼 198.235.24.35

🇺🇸 192.35.222.19

🇬🇧 185.216.145.171

🇺🇸 162.216.149.48

🇺🇸 159.223.135.95

🇩🇪 151.243.11.237

🇰🇷 118.37.214.187

🇭🇰 103.24.219.122

🇬🇧 89.37.172.138

🇬🇧 89.37.172.130

🇺🇸 66.132.195.46

🇺🇸 64.62.156.136

🇺🇸 64.23.134.225

🇦🇺 60.240.117.237

🇮🇳 49.204.74.149

🇨🇳 47.115.92.162

🇳🇱 45.148.10.141

🇩🇪 45.3.45.164