AbuseIPDB » 92.60.6.199

92.60.6.199 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH
Usage Type	Data Center/Web Hosting/Transit
Domain Name	nextlayer.at
Country	Austria
City	Vienna, Wien

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 92.60.6.199

Whois 92.60.6.199

IP Abuse Reports for 92.60.6.199:

This IP address has been reported a total of 45 times from 18 distinct sources. 92.60.6.199 was first reported on March 3rd 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MAGIC	2024-06-24 03:04:34 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2024-06-19 12:33:32 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 92.60.6.199 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210730) triggered by 92.60.6.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 19 08:33:28.364613 2024] [security2:error] [pid 14099] [client 92.60.6.199:60464] [client 92.60.6.199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.register-yacht-bahamas.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.register-yacht-bahamas.com"] [uri "/userName=YrmhQqORVofd&companyName=jVLUSROnhGYKJia&[email protected]"] [unique_id "ZnLQGLNoWD531U69Bg_aggAAAAs"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
nowyouknow	2024-06-12 04:55:20 (3 months ago)	(From [email protected]) UetDxJiR	Phishing Web Spam
MAGIC	2024-06-06 11:05:59 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
MAGIC	2024-06-02 17:09:50 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
10dencehispahard SL	2024-06-01 17:00:54 (4 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
Savvii	2024-05-31 20:09:22 (4 months ago)	10 attempts against mh-mag-customerspam-ban on bud	Web App Attack
Nicolmn	2024-05-29 12:17:11 (4 months ago)	Web form spam ( id mmmg.b )	Web Spam
Anonymous	2024-05-29 10:37:59 (4 months ago)		Web Spam
syokadmin	2024-05-26 00:04:29 (4 months ago)	92.60.6.199 (AT/Austria/-), 5 distributed SMTP Logins on account [[email protected]] in the ... show more92.60.6.199 (AT/Austria/-), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
Savvii	2024-05-25 04:50:32 (4 months ago)	1 attempts against mh-modsecurity-ban on plum	Brute-Force Web App Attack
TPI-Abuse	2024-05-13 22:12:43 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 92.60.6.199 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 92.60.6.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 13 18:10:34.537030 2024] [security2:error] [pid 408654] [client 92.60.6.199:53024] [client 92.60.6.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.utilis.net"] [uri "/wp-config.php_old2012"] [unique_id "ZkKP2lrnbTQN37E6jBNOKgAAAD8"] show less	Brute-Force Bad Web Bot Web App Attack
Savvii	2024-05-13 19:04:12 (4 months ago)	1 attempts against mh-modsecurity-ban on taro	Brute-Force Web App Attack
Anonymous	2024-05-12 08:28:22 (4 months ago)		Web Spam
Anonymous	2024-05-10 07:00:26 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 92.60.6.199 (AT/Austria/-)	Brute-Force