JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 153.52.92.116

153.52.92.116 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	NETLEN-CLOUD-TR
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44620
Domain Name	netlen.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 153.52.92.116

Whois 153.52.92.116

IP Abuse Reports for 153.52.92.116:

This IP address has been reported a total of 21 times from 20 distinct sources. 153.52.92.116 was first reported on August 24th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hero2026	2026-08-24 21:38:54 (14 hours ago)	Blocked by Fail2ban	Web App Attack
🇳🇱 maxxsense	2026-08-24 20:52:26 (14 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 153.52.92.116 (DE/German ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 153.52.92.116 (DE/Germany/-) show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-24 20:49:13 (15 hours ago)	(mod_security) mod_security (id:218420) triggered by 153.52.92.116 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 153.52.92.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:49:09.657047 2026] [security2:error] [pid 2253:tid 2253] [client 153.52.92.116:52074] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.26:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.26"] [uri "/hello.world"] [unique_id "aoyuRfClyM23ZCmRHW1DSgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 wristhulk	2026-08-24 20:39:50 (15 hours ago)	Honeypot: credential attempt on OpenCanary SSH honeypot. Username: 'admin' Password: 'admin'.	SSH Brute-Force
🇺🇸 arc21	2026-08-24 20:30:57 (15 hours ago)	2026-08-24T21:27:13.508801+01:00 NYC-MC-2 sshd-session[3949177]: Invalid user admin from 153.52.92.1 ... show more 2026-08-24T21:27:13.508801+01:00 NYC-MC-2 sshd-session[3949177]: Invalid user admin from 153.52.92.116 port 46408 2026-08-24T21:27:44.522273+01:00 NYC-MC-2 sshd-session[3961038]: Invalid user user from 153.52.92.116 port 47594 2026-08-24T21:28:48.055377+01:00 NYC-MC-2 sshd-session[3986044]: Invalid user user from 153.52.92.116 port 53738 2026-08-24T21:30:24.229964+01:00 NYC-MC-2 sshd-session[4024632]: Invalid user orangepi from 153.52.92.116 port 34794 2026-08-24T21:30:56.828428+01:00 NYC-MC-2 sshd-session[4037638]: Invalid user support from 153.52.92.116 port 41138 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-08-24 19:59:37 (15 hours ago)	tcp/2375 (2 or more attempts)	Port Scan
🇩🇪 24-seven.io	2026-08-24 19:53:19 (15 hours ago)	2026-08-24T21:52:46.411606+02:00 srv03 sshd-session[1520992]: pam_unix(sshd:auth): authentication fa ... show more 2026-08-24T21:52:46.411606+02:00 srv03 sshd-session[1520992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.52.92.116 2026-08-24T21:52:48.260490+02:00 srv03 sshd-session[1520992]: Failed password for invalid user admin from 153.52.92.116 port 52898 ssh2 2026-08-24T21:53:19.108660+02:00 srv03 sshd-session[1521393]: Invalid user user from 153.52.92.116 port 43400 ... show less	Brute-Force SSH
🇭🇰 leason	2026-08-24 18:59:38 (16 hours ago)	2026-08-25T02:55:35.073866+08:00 wawo-hk sshd-session[810762]: Invalid user admin from 153.52.92.116 ... show more 2026-08-25T02:55:35.073866+08:00 wawo-hk sshd-session[810762]: Invalid user admin from 153.52.92.116 port 32942 2026-08-25T02:56:07.733783+08:00 wawo-hk sshd-session[810773]: Invalid user user from 153.52.92.116 port 60878 2026-08-25T02:57:17.827567+08:00 wawo-hk sshd-session[810807]: Invalid user user from 153.52.92.116 port 51804 2026-08-25T02:59:04.532857+08:00 wawo-hk sshd-session[810845]: Invalid user orangepi from 153.52.92.116 port 48158 2026-08-25T02:59:37.793483+08:00 wawo-hk sshd-session[810869]: Invalid user support from 153.52.92.116 port 47100 ... show less	Brute-Force SSH
🇫🇷 chengkev	2026-08-24 17:32:46 (18 hours ago)	Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-24 17:03:15 (18 hours ago)	(mod_security) mod_security (id:218420) triggered by 153.52.92.116 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 153.52.92.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:03:06.975087 2026] [security2:error] [pid 26685:tid 26685] [client 153.52.92.116:35630] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.158:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.158"] [uri "/hello.world"] [unique_id "aox5SoCxq0lZNyXw2W96OwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 shaunc	2026-08-24 15:24:26 (20 hours ago)	Aug 24 10:24:22 mailman sshd[28511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Aug 24 10:24:22 mailman sshd[28511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.52.92.116 Aug 24 10:24:24 mailman sshd[28511]: Failed password for invalid user admin from 153.52.92.116 port 48062 ssh2 Aug 24 10:24:24 mailman sshd[28511]: Connection closed by 153.52.92.116 port 48062 [preauth] show less	Brute-Force SSH
🇺🇸 nyt	2026-08-24 15:07:38 (20 hours ago)	Path Traversal, CGI Probe, Empty UA + POST	Web App Attack
🇬🇧 Blake	2026-08-24 13:11:54 (22 hours ago)	Aug 24 14:10:49 meow auth.info sshd-session[19751]: Invalid user admin from 153.52.92.116 port 34600 ... show more Aug 24 14:10:49 meow auth.info sshd-session[19751]: Invalid user admin from 153.52.92.116 port 34600 Aug 24 14:10:49 meow auth.info sshd-session[19751]: Failed password for invalid user admin from 153.52.92.116 port 34600 ssh2 Aug 24 14:11:22 meow auth.info sshd-session[20076]: Invalid user user from 153.52.92.116 port 42876 Aug 24 14:11:22 meow auth.info sshd-session[20076]: Failed password for invalid user user from 153.52.92.116 port 42876 ssh2 Aug 24 14:11:53 meow auth.info sshd-session[20311]: Failed password for root from 153.52.92.116 port 54994 ssh2 ... show less	Brute-Force SSH
🇫🇷 dynamix	2026-08-24 11:16:47 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-08-24 09:26:16 (1 day ago)	SSH brute-force detected. Evidence: 2026-08-24T09:25:45.082597[HOSTNAME] sshd[1194582]: Invalid user ... show more SSH brute-force detected. Evidence: 2026-08-24T09:25:45.082597[HOSTNAME] sshd[1194582]: Invalid user admin from 153.52.92.116 port 38070 2026-08-24T09:26:16.260416[HOSTNAME] sshd[1194591]: Invalid user user from 153.52.92.116 port 39670 show less	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.181.52.2

🇮🇳 154.84.216.147

🇻🇪 38.248.160.121

🇪🇸 2a00:1d24:409:94:9999::9

🇺🇸 2400:cb00:988:1000:4a33:726b:47b:71e6

🇰🇷 221.164.54.120

🇩🇪 206.189.58.141

🇮🇳 203.145.143.163

🇺🇸 195.184.76.218

🇬🇧 193.176.29.8

🇲🇩 178.175.167.40

🇧🇷 172.69.91.17

🇫🇮 147.185.133.252

🇨🇳 121.224.5.228

🇮🇳 110.226.69.198

🇮🇳 103.203.37.50

🇨🇳 60.170.126.197

🇭🇰 45.249.244.136

🇨🇦 15.235.98.245

🇧🇷 186.251.2.39