JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.241.37.197

92.241.37.197 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 32%: ?

32%

ISP	Umniah Lil-Hawatef Al-Mutanaqelah Co.
Usage Type	Fixed Line ISP
ASN	AS9038
Domain Name	umniah.com
Country	🇯🇴 Jordan
City	Zarqa, Zarqa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.241.37.197

Whois 92.241.37.197

IP Abuse Reports for 92.241.37.197:

This IP address has been reported a total of 13 times from 10 distinct sources. 92.241.37.197 was first reported on September 19th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 15:39:10 (13 hours ago)	(mod_security) mod_security (id:210350) triggered by 92.241.37.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 92.241.37.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:39:05.716589 2026] [security2:error] [pid 5911:tid 5911] [client 92.241.37.197:33136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|psychtraining.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "psychtraining.org"] [uri "/console/adminer.php"] [unique_id "ao23Ge2kjGTlkYXZCgU7XwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-21 12:25:46 (4 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-19 18:00:05 (6 days ago)	Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a ... show more Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/9272/form_key/vtxRwaPxRd3zYux4/ \| UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows 95; Trident/4.0) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-08-08 00:00:14 (2 weeks ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇺🇸 kosada.com	2026-07-26 19:22:08 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 librebit	2026-07-16 08:56:23 (1 month ago)	Brute force	Brute-Force
🇩🇪 Vegascosmetics	2026-06-13 15:32:40 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-05-11 04:35:23 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 centurion	2026-05-10 23:28:11 (3 months ago)	Blocked by UFW on ns02 [2323/tcp] Source port: 60606 TTL: 53 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [2323/tcp] Source port: 60606 TTL: 53 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-03 15:21:24 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 92.241.37.197 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 92.241.37.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 11:21:16.137964 2026] [security2:error] [pid 20118:tid 20118] [client 92.241.37.197:50555] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.wfowisdom.systemcapacityoptimization.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wfowisdom.systemcapacityoptimization.com"] [uri "/php5.ini"] [unique_id "afdn7GXgt0-RQpvZtLTk9AAAAAQ"], referer: http://www.wfowisdom.systemcapacityoptimization.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (8 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-19 00:34:32 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇿🇦 Tokolosh Hunters	2025-09-19 12:54:35 (11 months ago)	AutoBlockWindow-Known bad useragent query-2025-09-19 12:54:34	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.148

🇺🇸 172.104.19.160

🇫🇮 147.185.133.26

🇨🇳 122.97.136.18

🇨🇳 111.18.57.15

🇸🇬 101.100.194.181

🇬🇧 101.36.97.80

🇳🇱 91.92.47.123

🇩🇪 87.118.116.90

🇳🇱 81.19.216.104

🇸🇦 51.36.18.58

🇳🇱 45.198.224.26

🇧🇪 34.78.86.82

🇨🇳 183.197.9.19

🇻🇳 183.91.11.36

🇨🇳 180.76.237.118

🇺🇦 176.103.15.155

🇺🇸 162.216.150.93

🇵🇹 85.240.193.104

🇩🇪 69.5.169.175